4b291de69debf8d9900b901c2eea5973_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b291de69debf8d9900b901c2eea5973_JaffaCakes118
Size

256KB
MD5

4b291de69debf8d9900b901c2eea5973
SHA1

968be07cb7e169e24d135d71b36c0fbacf3b9350
SHA256

a801f569d752fe0e170100dab48616602f9f6e1e19980781b23a5af83b72f7c9
SHA512

ef16f6aaf0d462a5533f0f3d0db7bca52fa8366bc9b7d83455bf68aeb301ec20d18f3cf44ee6c188fcddd36b1d97970d783513367ce5cb7dfcab6950a4018f29
SSDEEP

6144:BoDmTvad7PwvErCDOgO3lU4mZW0FZTPsnfkV50S2:BoqTyd7PwvIyY3lraW0PTPsnfkY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b291de69debf8d9900b901c2eea5973_JaffaCakes118

Files

4b291de69debf8d9900b901c2eea5973_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 254KB - Virtual size: 254KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ