de848d7a8fc498435755e7fd5bc0fc63_JaffaCakes118 | Triage

Sharing

General

Target

de848d7a8fc498435755e7fd5bc0fc63_JaffaCakes118
Size

594KB
MD5

de848d7a8fc498435755e7fd5bc0fc63
SHA1

53e34f932a122265ea44b51449599d4417c18d64
SHA256

54bf3d43081df1fe54973306d62bfe19fb27278c2248431095d1e953870dd09b
SHA512

bce48b926aecee76874f5d9f720b563f643f74af0ba8e0d6408092dbb0bc42e31cfd775a625652b1b701ac149ae056da0bdaaef57f726a034e98e37a67b9c5f6
SSDEEP

12288:8hATkOSjH7RS4p68WQyViGgaID4wBvRQao:aCS44dNyVitNvRQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de848d7a8fc498435755e7fd5bc0fc63_JaffaCakes118

Files

de848d7a8fc498435755e7fd5bc0fc63_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 436KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ