c9510fe32719677ff9cf7ae996504f2d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9510fe32719677ff9cf7ae996504f2d_JaffaCakes118
Size

2.0MB
MD5

c9510fe32719677ff9cf7ae996504f2d
SHA1

ed9bda459a21b17406d5190461b928f4cbcd227d
SHA256

469e4dffedc8e0994eb5ec80d31d3c2c41457575dcb861258a84ca1f3169a8cc
SHA512

978d8ac4bbf9f9e17b1e24c2b22dc61909426617fd98ec1e78857138bf90d2b4d5d235ccb9514f1da13ce0d29fd7236e156f24d0afcc55e14d459a2b4fa9e2e5
SSDEEP

49152:yVjcVccL/O5RlLrq+17FasY6DwOBfrnvV7UeWtqc:yVgnsRlvq+177YiwOBpIeWZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9510fe32719677ff9cf7ae996504f2d_JaffaCakes118

Files

c9510fe32719677ff9cf7ae996504f2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ