94a8d2f00a9c9208185960202a7b148e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94a8d2f00a9c9208185960202a7b148e_JaffaCakes118
Size

2.6MB
MD5

94a8d2f00a9c9208185960202a7b148e
SHA1

3c1db9688826ddcf8f99196fa247ce51c709abb2
SHA256

f0ab67d7d7423b2ee48f35a6819534e377aae9aadc839b41540f4a6755b05ac1
SHA512

592f7e2d7214491826f19075839a6a4ecd6012b9dc723b17fb59edbadbbb457d1c71180ec4136fda4e501dcc96b613fc25d1127a44f7cbb1329e4aa6e98674f9
SSDEEP

49152:9j9vCPPidPbs8oxX2MB2fbhFFMizm7UvYrlLLW3nY5RSw5xMkz:PK18oMo0hIPhLyI3j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94a8d2f00a9c9208185960202a7b148e_JaffaCakes118

Files

94a8d2f00a9c9208185960202a7b148e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ