882b2e9693ebeb3724015eef62f8b878_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

882b2e9693ebeb3724015eef62f8b878_JaffaCakes118
Size

648KB
MD5

882b2e9693ebeb3724015eef62f8b878
SHA1

4f245686b855aa87daa2de058420c5fe48e00cfe
SHA256

e1938c07c7f84caccd3c4ee78f87d7013721e08cc091f07ded33caeaf3adc44f
SHA512

208902f3513840b221b3ac2a18a6da1e167105856dd7e995ad39d528a7101b9bf610d2532b7e2413792999f4a385cea15456d74749762313b4f3ba81e893d418
SSDEEP

12288:aQxtNS+HjhUv1bgtkekn5dV3Z76FG7a6NfxsuJMDGXFxxRPhIFauZ0:ppudk0J9aYxQy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
882b2e9693ebeb3724015eef62f8b878_JaffaCakes118

Files

882b2e9693ebeb3724015eef62f8b878_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 604KB - Virtual size: 601KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ