cf268ddc15afd0030a14c2821c30ce4d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf268ddc15afd0030a14c2821c30ce4d_JaffaCakes118
Size

208KB
MD5

cf268ddc15afd0030a14c2821c30ce4d
SHA1

a9488f8a60d1426893cb26210c8b970d28c8e9ff
SHA256

d3c46f85992f597b142bcd7ea134481547d62c1feccf9ffa2e007407fbe3e2e8
SHA512

c52d643d5d7bb538b64432b1246283c7e3d50e122fec846ff3df9bb8acf1b0fa5bd7e8e90712bc9c65734f974f950a36e15d83dcc77efe498391d5a67f368263
SSDEEP

6144:0m5Ck6sTG8GIeI+G8KcHmcWV2Yx1zuty45pHTXx:hoFYx1yv5pF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf268ddc15afd0030a14c2821c30ce4d_JaffaCakes118

Files

cf268ddc15afd0030a14c2821c30ce4d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\r00\AppData\Local\Temp\2zaee5hu.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 97B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ