4a1389bf645faedcc5140dcbdf95445d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a1389bf645faedcc5140dcbdf95445d_JaffaCakes118
Size

667KB
MD5

4a1389bf645faedcc5140dcbdf95445d
SHA1

92d414046d11e83f7641b716903486920e832008
SHA256

c63e187797c772df140d27ab412bfe295520d4b5a71f416d852605eae202348d
SHA512

3de4cb62c0cf6311cecd1ab3d97d8f6f2ac195a87d2dbfc7849866957f3183c1c1902bcffd0501bf2d88edfd4fa0e21d906eab716a80a49c70bc4fe369b70b03
SSDEEP

12288:mat1yTMM6mr280eHRdbTdthA0mDQCpZzswGnpCnsuez:RtQ6mpHRd3Lhza7494ne

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a1389bf645faedcc5140dcbdf95445d_JaffaCakes118

Files

4a1389bf645faedcc5140dcbdf95445d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 661KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ