fb224fbe1aa6b663191cf1d730537fd6_JaffaCakes118 | Triage

Sharing

General

Target

fb224fbe1aa6b663191cf1d730537fd6_JaffaCakes118
Size

25KB
MD5

fb224fbe1aa6b663191cf1d730537fd6
SHA1

6a82fb803bbe3b20fb289b94f63c1cc2a6b97dee
SHA256

034fb6099b396601161d3076a4c80247cf30c46e3add3b2de6dea577209b4112
SHA512

383f6a9dc75b052354ac0ba59da6ad52daef796acaf2953d8cb5912e3bfa174729386e5172401a7676ad7c9bb934dff832ebbe0a8f15b39e0e9fa9e4bc40d505
SSDEEP

768:5vkGDkx0b/5+So7h4d7JRo4a/pPhsuE+fj:yf0b/5+Si4bWpFhsv+fj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb224fbe1aa6b663191cf1d730537fd6_JaffaCakes118

Files

fb224fbe1aa6b663191cf1d730537fd6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ