f04898c269950b3ebc21000bc91735d2_JaffaCakes118 | Triage

Sharing

General

Target

f04898c269950b3ebc21000bc91735d2_JaffaCakes118
Size

160KB
MD5

f04898c269950b3ebc21000bc91735d2
SHA1

bdf7d1a3d84f2335b7352f585e7cde40600e77db
SHA256

95d5dc568662f55ae1e2bb99f19bf2d5fc73a62ebbe26c2a9a2e01e11e6dcf74
SHA512

6351c75d5f2d8e670be388279bc20fddd07fe7d2460bb5cf0a90c449cee08ac440bdeefd73dac2913c7046d50b44b2c846ba00187ed63dbe84a89fa1557daf86
SSDEEP

3072:bNnjaxGA9MLb6voJEitiliAi34KpqpVpdGLZfnfmVWSkzS3BCtv0:x4GA9MabGx8WSYV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f04898c269950b3ebc21000bc91735d2_JaffaCakes118

Files

f04898c269950b3ebc21000bc91735d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ