dead5af3616b34f08b3fda3fed633a40_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dead5af3616b34f08b3fda3fed633a40_JaffaCakes118
Size

365KB
MD5

dead5af3616b34f08b3fda3fed633a40
SHA1

874db8b1acdb5b2b7ec867356330e807580f14f2
SHA256

1369269d2bf8aa2146ee89ed073b85e1a375263e0bd48c1b57da9f75d12c9da0
SHA512

749a7e6e7a475f27185654aad41c4106ee4fdc741acfb406aa62efe8103184b125de2e5411fbaeea2d376fe317975c00960e8da10e157c07843833855c6ca977
SSDEEP

3072:S3DtW6TZWG0pGPICm2rHegUIjg0ZaIGRrHegMb6tQ:SFWG0ulAk9Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dead5af3616b34f08b3fda3fed633a40_JaffaCakes118

Files

dead5af3616b34f08b3fda3fed633a40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ