fd2e74276e544c668fc76a55418f898e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd2e74276e544c668fc76a55418f898e_JaffaCakes118
Size

196KB
MD5

fd2e74276e544c668fc76a55418f898e
SHA1

510330210a3992586ead80792f008bf4a1c4af08
SHA256

0bc1827a0f56182bc54a2bf8671e2fc5ab6a3c51b1c7f947934e48bbe374a291
SHA512

43b40a130e8091350fd737485619abd6665d71270f7e397c141eedcd136b85fc6257c30e8519d4f646bdf81da6f8363549131c8ec56fbfbb97a9b836ea1720a3
SSDEEP

3072:AcwZM43VXRPHmZ+vhboqD+7KjtOHkBHGapLdbMi11gab0Qv/AOmxrGEP:NwZ5lXRPGmboqD+7KjtC1M3tbmE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd2e74276e544c668fc76a55418f898e_JaffaCakes118

Files

fd2e74276e544c668fc76a55418f898e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ