fd8dd1c52a74d6a0a1e65aa5356048f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd8dd1c52a74d6a0a1e65aa5356048f4_JaffaCakes118
Size

211KB
MD5

fd8dd1c52a74d6a0a1e65aa5356048f4
SHA1

e2de06786c01719b556b3731c2c49ff420431a2b
SHA256

ef6deaeda86b2502268d66ab16915cadf2267357e537e13630a626585b9e335d
SHA512

3ea2bdedc5df846617f496bcdb08f1602073fdb45adb3e1993fec1aae3415c567ec506616cf8d945ae38f1e7c3ed5e41c26a39099b4d1ed125ea1100de8d2490
SSDEEP

3072:pCDqUWqBT6Ln53mG3WqM+o2gGRuHHkcEKEamG+d0NVXVOMt1tQjHo7+6B08rLzAR:pCmEQ53mMW964uDGw0HGcS8le

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd8dd1c52a74d6a0a1e65aa5356048f4_JaffaCakes118

Files

fd8dd1c52a74d6a0a1e65aa5356048f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ