648fc78074a5115e78b01f77ad4a419f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

648fc78074a5115e78b01f77ad4a419f_JaffaCakes118
Size

228KB
MD5

648fc78074a5115e78b01f77ad4a419f
SHA1

62aee1919e36cec28e259a1e3c44b5acad9ffd43
SHA256

9dd0fb8f1d51a932b370a28cec2ae408388493f259ec864c92b2b7d34b99296e
SHA512

ab8e8558c04980d5ddec21aea827b46c3921f0121cb1d650a0bb1adbfc37d8b2e9682889e904b34df7db70a48f953a1dde89ac0a6ed6a1df4bea2672e9b3df0c
SSDEEP

6144:V8n7Qdsmhm3GBsI9O81jG7H8/LmB8Y0NFGSvhBc5:ARI9O81KHS3Y0NU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
648fc78074a5115e78b01f77ad4a419f_JaffaCakes118

Files

648fc78074a5115e78b01f77ad4a419f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ