4adad1e3368150748b1c3a6f418312c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4adad1e3368150748b1c3a6f418312c4_JaffaCakes118
Size

966KB
MD5

4adad1e3368150748b1c3a6f418312c4
SHA1

92a40fdfef8d458e8e3cd172254c56d85fc25369
SHA256

29446d1540cbd6148796ef323ed21e8cb496af1287c38658c870b66dab70b078
SHA512

ca0ed4a662d4ba43f573c4a12ac6ff3ff9df98c36e1db2490716a0466186181363326a3787c20dfddc917eb9c25e159079bf064f46a9e768b36a9892a7762ed5
SSDEEP

12288:6ATGmT8GAeT1XWJ2yFgY0z9PPZPACnqaX:6ATnT8GAeT1XWJ2ymBPpA4qW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4adad1e3368150748b1c3a6f418312c4_JaffaCakes118

Files

4adad1e3368150748b1c3a6f418312c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 581KB - Virtual size: 581KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ