0a398a5ce48bfea366e0ed7ce8df5aa0_JaffaCakes118 | Triage

Sharing

General

Target

0a398a5ce48bfea366e0ed7ce8df5aa0_JaffaCakes118
Size

384KB
MD5

0a398a5ce48bfea366e0ed7ce8df5aa0
SHA1

c63498026b278efe72b063b3f9a1efa299c39541
SHA256

3bc6ab721f878246ff7ef6df4c28f34c8cd1080bc47cfb3e673e529fcb7fa6dc
SHA512

a5e5e1cfcd1852b2489e4ce85fe1c73df8689f36a0145bd11cad97289dd23770ca88e0988ae52b339b87ba384ac2285e83629e1924b9312f767d1c125aee37b8
SSDEEP

6144:JYo6q5jm9GT5TBqUHsQa2ZomzxxrzP9ZTe4P50vnubx6g:JYo68jmo19qio2ZFz7P9k4R0vnuT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a398a5ce48bfea366e0ed7ce8df5aa0_JaffaCakes118

Files

0a398a5ce48bfea366e0ed7ce8df5aa0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 382KB - Virtual size: 382KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ