4cf1647f3e920e31c4dd8961f2b48316_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cf1647f3e920e31c4dd8961f2b48316_JaffaCakes118
Size

50KB
MD5

4cf1647f3e920e31c4dd8961f2b48316
SHA1

9696bb9d282656311c4f391befd5768d9e4444ae
SHA256

2094a9afeeefd175b24a9db1d5a15fb7011f5093ce1307ccc27989ed3b3ab502
SHA512

f4759c7f59362da4bc316dae156b4b53274a22787d657a0a756f66c0078b0db2f05dd867ed6ac904520b1f72925970c07183f3258209d725c4030df2e6f8d9af
SSDEEP

1536:jv+/4a4G23LsKdUrEi2W0z+2JSS57wNYyvh:jG/34GbXrVEvJSM7wN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cf1647f3e920e31c4dd8961f2b48316_JaffaCakes118

Files

4cf1647f3e920e31c4dd8961f2b48316_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ