4e0c459709f5e650b91cbd4fbb5e8884_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e0c459709f5e650b91cbd4fbb5e8884_JaffaCakes118
Size

153KB
MD5

4e0c459709f5e650b91cbd4fbb5e8884
SHA1

0e00f01107106cf0d6080b22490ab35e063deaed
SHA256

47cc2020e294d2ed64e9d7f91bd5b676710f5fe275594099e871674a50a93ae1
SHA512

23d633005574ed07405febaff8eca056e687faf8ae1d3332aafe4b83b2f01055cce5d3a9c1960231459239efc4c0058b994a0ddc44d0cd56d65053f97ef40832
SSDEEP

1536:ENaT8IQNGz9iK8N+yS6mQQSUIXryCSwO/mm4M8Y7qcA:ENaT8IQKkNWqQ1CWwOXZ8oA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e0c459709f5e650b91cbd4fbb5e8884_JaffaCakes118

Files

4e0c459709f5e650b91cbd4fbb5e8884_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ