4d1837c6df3c12fd808f09cf6f3154c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d1837c6df3c12fd808f09cf6f3154c2_JaffaCakes118
Size

760KB
MD5

4d1837c6df3c12fd808f09cf6f3154c2
SHA1

2b90b8cc4e10cc5ec526a6d576e4a4e6570a7deb
SHA256

8a6e21fb47bc8ae17f8c483ac9cdf3511815b2784d410b4c0d6b52777c75f885
SHA512

08274412a2829c84a94bb653e658614d45c2f5d0477cd9b5d399545b92b0e56d060438916ca2db8d6565e1bb35a7b19fb704d95eca9d4935ebf051b7853c0862
SSDEEP

12288:ecO2zjwsk+UNfVDyacHLrboowTlEA1+mXwVAb40v8R5/gqU:eI1lvLrbooKXERVQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d1837c6df3c12fd808f09cf6f3154c2_JaffaCakes118

Files

4d1837c6df3c12fd808f09cf6f3154c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 533KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ