fd4105855af26f1ae87cfd821bb46011_JaffaCakes118 | Triage

Sharing

General

Target

fd4105855af26f1ae87cfd821bb46011_JaffaCakes118
Size

318KB
MD5

fd4105855af26f1ae87cfd821bb46011
SHA1

afa67fc92a38a37b5742974c08a2e622b9badd10
SHA256

d7e72e64771e316dc815da8af6e51a999d3fa7118aad8932cc56441d8e1a3d1d
SHA512

52d10433c2c0814ff1986f04bca114a49b0f4ab9c62254cf3ac53a273cb9b5914f45148fd1d20d693e9ca5a98033a2680f41c16b908f76d4f28017f78f09b519
SSDEEP

6144:IZMBxVJ5OdlRDj/pt44MPK6pxOrqaCyD6pRcDbKkWzxcBfhSF:9b/5OFM3CX7KRab7IxI5SF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd4105855af26f1ae87cfd821bb46011_JaffaCakes118

Files

fd4105855af26f1ae87cfd821bb46011_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 314KB - Virtual size: 313KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ