69f1ce1a13c8cacdf1a80452f3e66ca3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69f1ce1a13c8cacdf1a80452f3e66ca3_JaffaCakes118
Size

172KB
MD5

69f1ce1a13c8cacdf1a80452f3e66ca3
SHA1

418e41b7c71786cb371f2fa9d75bf64d18626ad7
SHA256

141c35845962d074e9c651d9b8b73012e23cb236024e7967a9106adecd0a89ac
SHA512

78b497ca69c98f9716d7826cda0eb16788cbaf1edea02ea61139b2af0fe82f59adaf0d2af9886f72feb8451a3872d89d3f1715c009f193e9d9385f8575990c65
SSDEEP

3072:giOZkAYWJ9pdJV8kLT1OhQ+miByfLutcFOdE96:gX9YW8U0mEM4ndE9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69f1ce1a13c8cacdf1a80452f3e66ca3_JaffaCakes118

Files

69f1ce1a13c8cacdf1a80452f3e66ca3_JaffaCakes118
.exe .pdf windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 160KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ