71e6a278944aa71d9ae212bd362fd25f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71e6a278944aa71d9ae212bd362fd25f_JaffaCakes118
Size

888KB
MD5

71e6a278944aa71d9ae212bd362fd25f
SHA1

0d73b4b1a52514c09cb1be07607c2db449766bc5
SHA256

307126b81480144c279fb297f4c2a46b2e517dec2ee8bc7e2f2e813663ac65ba
SHA512

fa9fc8f218dcf0a030657dc1e10240f63aea83e3c17f61f650abb493c938f8d0637870cbf5de871383354447aad1424ddb5e74a382f2610d4b34c68c1a39de55
SSDEEP

24576:fSRObxhb5JqFxS04i7LSRObxhb5JqFxS04i7:fSR+J5sFxr3SR+J5sFxr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71e6a278944aa71d9ae212bd362fd25f_JaffaCakes118

Files

71e6a278944aa71d9ae212bd362fd25f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 876KB - Virtual size: 872KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ