fb38196980511ef6b202283294edba24_JaffaCakes118 | Triage

Sharing

General

Target

fb38196980511ef6b202283294edba24_JaffaCakes118
Size

644KB
MD5

fb38196980511ef6b202283294edba24
SHA1

2545bd9a51b598dfa88a0a375a1cb438d8c84769
SHA256

e62dc48007b31d30d8235065968a9518028f30733f13c4e10995fb155e11f3d2
SHA512

8d69b57169a3b6330a2460b9570293a444d889b9c2268c2814aea0606efb6886d400b5bcb0c364fb4d8465bc07ea7ee78468c57fe0e30389a426fdef0da09935
SSDEEP

12288:vICbYQjoiuZ3JKGN9xtzdcwOpb6AZnreWa:QCbYQjoBZ3J1ZIF5tr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb38196980511ef6b202283294edba24_JaffaCakes118

Files

fb38196980511ef6b202283294edba24_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 615KB - Virtual size: 615KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ