fc4df49881f1ac70aaba048457aaf64a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc4df49881f1ac70aaba048457aaf64a_JaffaCakes118
Size

660KB
MD5

fc4df49881f1ac70aaba048457aaf64a
SHA1

62a2d53072e4f77c87bfaff9274a73aca6e7ef7d
SHA256

d276252267bfa172ca1d8b1fde6cf471afeaa98e4b223033e7cb3728f0e38559
SHA512

8ebbbb5101085bad37bae99c2edd2afbceabe274c4680eedc6850b25b3e880e41f41f53c6c211e589ac87841790287b7b485701b233542e092f0f7c1d7d6b00a
SSDEEP

12288:2+izwhmsxw4WamSBtqkgu4YPGiTX/met0tqkgu4YP4:2+izsl9WaiMBTXFhM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc4df49881f1ac70aaba048457aaf64a_JaffaCakes118

Files

fc4df49881f1ac70aaba048457aaf64a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 584KB - Virtual size: 582KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ