07d42ade4f961757388c9c67c9ac4c90_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07d42ade4f961757388c9c67c9ac4c90_JaffaCakes118
Size

188KB
MD5

07d42ade4f961757388c9c67c9ac4c90
SHA1

c782d872310f8d6a22149e5c1e8df9b8ab116cdd
SHA256

16439d9872c0deacdc1826abc6850d9f17b0c7650feb5d2391295aba829c2fad
SHA512

eece72811186b1d03255a8aeda04d6237064d234af08b176b809dae7d68f5e24d31bbb9c3459ca886c59ae325d53da9b144429ce48ad62fc1680b996f42db008
SSDEEP

3072:/PxeBqVjEdQti4MNIbZOJmceKrOhH5pF20KTq9o:nxTVjWGi4MmbZOXrayao

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07d42ade4f961757388c9c67c9ac4c90_JaffaCakes118

Files

07d42ade4f961757388c9c67c9ac4c90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ