fa451d9fcbb382547304fb3c197df41f_JaffaCakes118 | Triage

Sharing

General

Target

fa451d9fcbb382547304fb3c197df41f_JaffaCakes118
Size

914KB
MD5

fa451d9fcbb382547304fb3c197df41f
SHA1

a94eab5ed10b473a368bd2b952a36e1cfb6a86f3
SHA256

d31fdbf6220e3ab12cb51cbe502fde0cb5b485c0b187791cad1a06e0117db36a
SHA512

4205f65b521bbd54287184c2a064f0f6b43fa500d1fb350bd81f120e7f5bca64e8201909ac105ae0d2a7196a7e1199bace5fa0533951436051deed3e44ff8ee5
SSDEEP

12288:Ha05RoPvP+hzDMm/xy/e4rJPVI80bk7DrBfJgZWw:hQPvGhHZWe4rJrMq5wW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa451d9fcbb382547304fb3c197df41f_JaffaCakes118

Files

fa451d9fcbb382547304fb3c197df41f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 912KB - Virtual size: 911KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ