b3e3f3b0440474498af0fa7112cd3759_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3e3f3b0440474498af0fa7112cd3759_JaffaCakes118
Size

5.7MB
MD5

b3e3f3b0440474498af0fa7112cd3759
SHA1

90e4d2b73e4f86faaf1e7dcfed43d19f320fdabc
SHA256

dc7e74f96d0ff592a6870e46f8b3bed5800dbfbbe7b476008cca9e8cfd62f9e4
SHA512

6dcffeac4eda9cd59fdbd7fdb9200c6f7d30c5e0058ff5262cb2caa09192d25ce87a91cc137734b8ab4caa504ff9c6ef671cc280b3114b385b41304f0d257f69
SSDEEP

6144:Ka4Oq4A1Sknb7SlASCsC+X7dEgdSAHM9:CECbu2S3C+X7dEg5HM9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3e3f3b0440474498af0fa7112cd3759_JaffaCakes118

Files

b3e3f3b0440474498af0fa7112cd3759_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ