fede524dcb91220745f2de9483ab516f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fede524dcb91220745f2de9483ab516f_JaffaCakes118
Size

921KB
MD5

fede524dcb91220745f2de9483ab516f
SHA1

132bcab1570b9d8ae3a906bc0bfdc0c6e9dbd4be
SHA256

e3902b62c8d77fcc9078ccc4a4aefa8cfe54ab9753603ad7928af939615801a4
SHA512

60aec41fe71a1477fb3c4bd6d0f283625850c157da92ae5de553761bde6244de860771c61ab45d94b1eee77eb34f9790b0c9d77d8a780dab118433f7f48ef3c8
SSDEEP

24576:UWXP5NE5HQeFfh7a7XOkjgSRGSoIfzr0gA4RScSBIa3f:PeNQevqXjYazr0gLSLl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fede524dcb91220745f2de9483ab516f_JaffaCakes118

Files

fede524dcb91220745f2de9483ab516f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ