0f049ef9785bc7585635c0c7f9296def_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f049ef9785bc7585635c0c7f9296def_JaffaCakes118
Size

9KB
MD5

0f049ef9785bc7585635c0c7f9296def
SHA1

dcaf1bd077f86e46dcdae709fb562568b74d7537
SHA256

4d140c53c0255d64ef6774dbc5700dffc710d217cf3ef97af5820f1e65c3003b
SHA512

8870a15a7c7a6be9c98ec47c0a74ae103d229aee280fcdfa70f6e7b466efe9e234878a766df55c5fb5c0b5a026c0044803b18a82193a4c7d8fc42571d4074a64
SSDEEP

192:wBksuvPY82gQv5F4Wxt8eMZZ3x93VnjdwCzx3XaU:E82l4Qt8eMDFnhwC1Ha

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f049ef9785bc7585635c0c7f9296def_JaffaCakes118

Files

0f049ef9785bc7585635c0c7f9296def_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ