fa4bbab8d11454b2c500ddb41495d724_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa4bbab8d11454b2c500ddb41495d724_JaffaCakes118
Size

2.6MB
MD5

fa4bbab8d11454b2c500ddb41495d724
SHA1

eccfb232d2abc8275d35c0ac209a9a3984bff988
SHA256

cc70ae246b720c4bee236a15876cd777d1c37ca588c5b238f9b78a3df9327d03
SHA512

0332888fd567eb223ec67df59f6c092139e14eedbe2a015d3eee7f31ecefe7349745a306096d3140b25f2c9a3bc039789139040ac159de399a4cdeaf6ada3fbd
SSDEEP

12288:YuCXQ8TeTBudT/FH7iRpDdaZrlKPhlgrJtnSezQwBJLPEUFyK17xqAh:YuCXQ8TeTBYnQwjEUFyK17xqA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa4bbab8d11454b2c500ddb41495d724_JaffaCakes118

Files

fa4bbab8d11454b2c500ddb41495d724_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ