a129455d583aed6e64236eee15b184c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a129455d583aed6e64236eee15b184c3_JaffaCakes118
Size

49KB
MD5

a129455d583aed6e64236eee15b184c3
SHA1

0e69bccf0aa045537c6e8589c7663836766394c7
SHA256

52c0f3da54741ba9687c87fdddce111d784be4b585d9216aa84565b49b46a547
SHA512

9f8aeba93849ce68f6e3f9094ebdaaf9fd72cb9d0f4327d4a87a9f48bf9a8915e3194b0019a03d142667f1bc4e37a34de54f0bccd83c43f0d2fa484146fd4a5e
SSDEEP

768:G+ixgt5XA9YhD9hzcq4fjuRiPjg/NPMxEtc:G+ogHw9Y99hwqZR8gWWO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a129455d583aed6e64236eee15b184c3_JaffaCakes118

Files

a129455d583aed6e64236eee15b184c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ