fc08f59d83273ed14e2435358484b10b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc08f59d83273ed14e2435358484b10b_JaffaCakes118
Size

979KB
MD5

fc08f59d83273ed14e2435358484b10b
SHA1

cd1ba23f9563e21fc6f7d4f220a2ef522056abbd
SHA256

aab4280f492f235ffef717f423a138ba6c3da9fb2a171ccc4f39e7da4b95ba15
SHA512

302c068af1cb1baca3ee8377ef702cad9478d38e79a576020182997235b5cb310fd980dda854d8c7fd455a7ec2bc938455999d0d2f6eda2bdcd555659705e61a
SSDEEP

24576:ioZQrto39g6SE5Dh6xhMEcCyTEzfjRXWkePzPIFG7:isNGE5QdcCyTEnRGPbPIF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc08f59d83273ed14e2435358484b10b_JaffaCakes118

Files

fc08f59d83273ed14e2435358484b10b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 977KB - Virtual size: 976KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ