da6434a4ff2a9c97264d52ade7e10013_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da6434a4ff2a9c97264d52ade7e10013_JaffaCakes118
Size

16KB
MD5

da6434a4ff2a9c97264d52ade7e10013
SHA1

111ddfd11c0b01064d26a74b2aea808080e704b6
SHA256

5d991ac9fd4e458bda5a4413d1514993c048bff5b404b4ce66dbf2a384713839
SHA512

b44cb09a850e5fe6bc0c43b3e9b96b74099ff70f03a5a741f9346723f6e8d8e73a50e2da7fcac23f0ba31ef2b93793aa9f5f2c1af1c4f6b87b012c27c90c997e
SSDEEP

384:7v3pI0fBVK52Du9XKfhUe6/apbNKkcU2ixv:7v5TfBc52YKfhFBcNiN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da6434a4ff2a9c97264d52ade7e10013_JaffaCakes118

Files

da6434a4ff2a9c97264d52ade7e10013_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ