fd7fb923c415dd7c06417fa6a6ac3b72_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd7fb923c415dd7c06417fa6a6ac3b72_JaffaCakes118
Size

293KB
MD5

fd7fb923c415dd7c06417fa6a6ac3b72
SHA1

57f196f4671288d073fd5e8dccca5c4fcdb58b72
SHA256

5dc209f4ba4bdcd21e8170aabb0c52912b85bdbdb7d9438e1a4fd0cc6aa8a32a
SHA512

51b2f94ba809d2ab16e3ca2a7942f93a2d43ae818328f03820e3d284d0d4f806eadfeee29533e816c0b4cf9b9be850b14b5a5ee3d3a50d4bbaa3edc723358c56
SSDEEP

6144:sWk7tt6zOHVGXY8QE7YLp7AjILILQ3U74g0:sWY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd7fb923c415dd7c06417fa6a6ac3b72_JaffaCakes118

Files

fd7fb923c415dd7c06417fa6a6ac3b72_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 286KB - Virtual size: 285KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ