a2fe38df3f566c83f0b28ecfa9162d2c_JaffaCakes118 | Triage

Sharing

General

Target

a2fe38df3f566c83f0b28ecfa9162d2c_JaffaCakes118
Size

139KB
MD5

a2fe38df3f566c83f0b28ecfa9162d2c
SHA1

beaa336f2f16dedacdbf33c4960ae8845370009a
SHA256

50db968c194b368c96f2cdd5b37a98dc8e138c6328a01b1061bc127b54cfbe95
SHA512

ab49e00fb0aebcc5bc3555652ffe268d1c61c26e7b6dc10d500bc24c34ea21ba643543ce96c677e287867a774680ca5944d2c76c7df6940b5023f58843d3f4c0
SSDEEP

3072:tRdvg3l89QgGfOOQ0zXg7H81jpgVe5anC6hRXIXG:to3l8EfOWzY8lr5QC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
a2fe38df3f566c83f0b28ecfa9162d2c_JaffaCakes118

Files

a2fe38df3f566c83f0b28ecfa9162d2c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ