acc4997f1df27fb0ee98c0df36b2d728_JaffaCakes118 | Triage

Sharing

General

Target

acc4997f1df27fb0ee98c0df36b2d728_JaffaCakes118
Size

909KB
MD5

acc4997f1df27fb0ee98c0df36b2d728
SHA1

e2b1c615d2f1e710c8ec35c9ccb86abc9c937a21
SHA256

3416768a9a612e4860e6c2674ada709b4e03cde906b3562f55f1e899248f71ed
SHA512

53bae22c6ed77c438cb92dfd29f8e5269532da1eadc0fcdfe5b1de9cf9f993af53e84a9e78bcff8f3398412e6d3d684626f8d84e4acfa689ace3616806441596
SSDEEP

12288:ekHOfz7SwcZqNlOo3DcDL0zvzuINXGCG7wXixYVzKkLsIPakjUdzCBj0HTutLY41:rHgcwGYJG4/YS04QM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acc4997f1df27fb0ee98c0df36b2d728_JaffaCakes118

Files

acc4997f1df27fb0ee98c0df36b2d728_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 907KB - Virtual size: 907KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ