68ae154089846d5866a3961b62780f32_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68ae154089846d5866a3961b62780f32_JaffaCakes118
Size

836KB
MD5

68ae154089846d5866a3961b62780f32
SHA1

96d44fd4d42d6c48a9d8e21f8fcb9e52b9503129
SHA256

c99601c080c44c225ab3b5d80996e851947793fb69a13a9c0dbf06ea5d432b84
SHA512

4512fcf26d28ac43cd2713c2530a8303f7d083f7158f37030cd8fa30b28e1b6e9e63cd874b72d1e52c8d28d858929a83d79fd26fd23576060dbc04b64a6169d5
SSDEEP

24576:wKJuUst10RPi7CiuYsDbc3rvj+0DEL+Q5:TuUsitYsfqrbnq+i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68ae154089846d5866a3961b62780f32_JaffaCakes118

Files

68ae154089846d5866a3961b62780f32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 804KB - Virtual size: 801KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ