fa7bb59a1f74a4f37e2e9bd56972e4c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa7bb59a1f74a4f37e2e9bd56972e4c8_JaffaCakes118
Size

930KB
MD5

fa7bb59a1f74a4f37e2e9bd56972e4c8
SHA1

4709526694241c9d7e79f1421fea1c7efc6158ea
SHA256

84626ac46100c9066b3510e7250d4209a0a7c246f393ca3265f9cb24f6f91bb6
SHA512

3368576dea5ba715d0b32e43753ba1fe6700eb0304c89cf0af2272887e6acaea653782ed49457d770a08feeac232906d188d22a430856e94795b1e6dae62fa2f
SSDEEP

12288:4bPBHwdHhPy2bakmcHJtE/W1FFIWT6dbt7Zus1EPOiqTTAwLq6:4AbxqTTv26

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa7bb59a1f74a4f37e2e9bd56972e4c8_JaffaCakes118

Files

fa7bb59a1f74a4f37e2e9bd56972e4c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 928KB - Virtual size: 928KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ