0550b993623c9b937dcde3ff89824486_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0550b993623c9b937dcde3ff89824486_JaffaCakes118
Size

1.8MB
MD5

0550b993623c9b937dcde3ff89824486
SHA1

b740a2afb08af7a0f17639cd8766494734c013bb
SHA256

de986b9cd3d8229488200e72e7bfddd702b6ef8707d59ac52a481a3af649dce4
SHA512

aeac31508c35a68470b419b871736a5560787a23ab991db8a0966a3715daffe288e23ab3cbad138457202234d45d9d30612599c37cbe92aa460ef8b990b4eb58
SSDEEP

49152:d7DA0vphfnGKnrt8Y4QbEn9bvtiSxmHsUmhCXgcSe:d7M0RFGKn58MwlRQMyLZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0550b993623c9b937dcde3ff89824486_JaffaCakes118

Files

0550b993623c9b937dcde3ff89824486_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ