481430a18f1f606f1adc20ba26532b49_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

481430a18f1f606f1adc20ba26532b49_JaffaCakes118
Size

1.2MB
MD5

481430a18f1f606f1adc20ba26532b49
SHA1

395fc554d403f23b9b871fd297ef26a83583498e
SHA256

8862eb177b707fc4844f807d369865eaeef56f541b1c1f067f6cd90ab9d499dd
SHA512

2256f5ae40c2e957b656391bc540148aefa034e79215e3bc5389a943abf77d6bcde6abd0f33ca6bd56281e399b181659fe6f23d2591f08b5e610befdb37efd1c
SSDEEP

24576:HhqMYdprgqE8sleQy2bkqjZcFMV3bLCHYvnpotX3t3Pf2:HhqDpJE3QOnjZy1HsGBG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
481430a18f1f606f1adc20ba26532b49_JaffaCakes118

Files

481430a18f1f606f1adc20ba26532b49_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ