de56f2b2ad60310e4066a02b1fd05c98_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de56f2b2ad60310e4066a02b1fd05c98_JaffaCakes118
Size

51KB
MD5

de56f2b2ad60310e4066a02b1fd05c98
SHA1

e3694ce9391a2c11264bb71182f52597c97f299e
SHA256

43b15675a41aaf80fe2e9236d913ee8b7fa3692e31946d458ed420ba6f1ea127
SHA512

b687a399c78e80c96776412c183bfa16cc3f56f74dd081ffe0d6e3558b9f9cf8685ca12effead7cde2c3b73a8ea50815224cd8d5672b814258b0e3cff332f8e9
SSDEEP

768:ChGN8T0iDyiWqTcIn5SKXqUcwmpoHL+49fo9sEq00ByqxozYcCe:qjHWUBv1L7fo9mByqxa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de56f2b2ad60310e4066a02b1fd05c98_JaffaCakes118

Files

de56f2b2ad60310e4066a02b1fd05c98_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.TEXT
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.SDATA
Size: 512B - Virtual size: 155B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RELOC
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ