a89c79ea16938cede9b9b52a11d33fb8_JaffaCakes118 | Triage

Sharing

General

Target

a89c79ea16938cede9b9b52a11d33fb8_JaffaCakes118
Size

298KB
MD5

a89c79ea16938cede9b9b52a11d33fb8
SHA1

0d37a98824f6ccb470cc39c73c809e336fb5543a
SHA256

a85cd0a43faf0de59729bbe5b3189087e08ec9138cf5acac4e2cda9f9e567b19
SHA512

3d570ac5798de05ffb5acec91d807db6ba22bf7aa0c0e83798ee706808f5207a31c3ed1f36dd7c5b93fd7f013a1c9210e4a89454eeef104bd8d8dfe691cec380
SSDEEP

6144:BdILOUcqGyItWfpMKjjOOKy3fvpPMJ/TFF:BdIXTItepMKvOOKy3mJ/T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a89c79ea16938cede9b9b52a11d33fb8_JaffaCakes118

Files

a89c79ea16938cede9b9b52a11d33fb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ