fdf3f38055c41157ee9baec5e4907d51_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdf3f38055c41157ee9baec5e4907d51_JaffaCakes118
Size

99KB
MD5

fdf3f38055c41157ee9baec5e4907d51
SHA1

da0366f46e9eb5089498a1db3b35e3efc4451f50
SHA256

77504ecf64803aae648a598f15ae84d489a65736093d7651b0b1efceae5e076f
SHA512

ae4e22422ac529a0b639c41f6318582f9bc324d8dc37a1b5901000f1464fb85234aa1f5fad174de20b487cca5994b2446bd86b0718b5d471a80fa5f276179a90
SSDEEP

3072:3c5zE6A9xhGcFgJErwmGCiYWGRFCvM337:3tBFgmrwHQfC+3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdf3f38055c41157ee9baec5e4907d51_JaffaCakes118

Files

fdf3f38055c41157ee9baec5e4907d51_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ