0fca29f7ac8e9d4150a9d618f3ba2d12_JaffaCakes118 | Triage

Sharing

General

Target

0fca29f7ac8e9d4150a9d618f3ba2d12_JaffaCakes118
Size

36KB
MD5

0fca29f7ac8e9d4150a9d618f3ba2d12
SHA1

f4fd5358bfa1e506704b63d42547c2c84ba58738
SHA256

0db25c58d7e5ba120001e946c0b49d3cde121452a7a5133dbf2f4090d4c73202
SHA512

d05600ceee9e1e231348db4a711c14f31cd969534ef9d1191a404112e3f7ac23ecec344e9c529ce4c63de0ed5d7ec110458cc5bee6f21fa516742acc290969b1
SSDEEP

768:0++jvgacEj862pdUupHCquylm7XI8/N0XpW9o:0bnyyupiquyg/l9o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fca29f7ac8e9d4150a9d618f3ba2d12_JaffaCakes118

Files

0fca29f7ac8e9d4150a9d618f3ba2d12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ