4bfbd2d4f49b6d42da268e59e01236fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bfbd2d4f49b6d42da268e59e01236fe_JaffaCakes118
Size

9KB
MD5

4bfbd2d4f49b6d42da268e59e01236fe
SHA1

dcdb3ee4786885e220ee16c62b6fed93af90dbd4
SHA256

21880bf9e1603f3b6b2cc04c0c0743f93cd736cc51d10a6a33979e4db9d03fe0
SHA512

fa0c8220897ca077b76c932b63693da04b82d4881055b074c1f9088e56589b25e66bffe856645786838900e94a94864f830f398bae1f10c98ab8d2df3158041d
SSDEEP

192:UBksuXzHNQLleMZZ3z93Vnjdwqza3MNmJv31Q:DHEleM9FnhwqGcA31

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bfbd2d4f49b6d42da268e59e01236fe_JaffaCakes118

Files

4bfbd2d4f49b6d42da268e59e01236fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ