2b49b858308f07b48b4b9a97214574ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b49b858308f07b48b4b9a97214574ea_JaffaCakes118
Size

622KB
MD5

2b49b858308f07b48b4b9a97214574ea
SHA1

e97cc8f38c19b8cc35026a8ec90e26fe567813de
SHA256

72d1033a5c918af155dd6fbc10ff8be53ed970b84cdf0095220a52d3e75fab3f
SHA512

c9e7b7ead2993b9af6d81e6f675b57603abe5a92924dd9f025203bf419c716da40fc061c2e73b8c195f56a3ca51a6bc9014970500bf5c22406f142cbc9471d10
SSDEEP

12288:O8aloxb06gY+nB5wJYdXMHnK6FgmaqmPAVJ:O8fbRioYdL6Fg6mPA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b49b858308f07b48b4b9a97214574ea_JaffaCakes118

Files

2b49b858308f07b48b4b9a97214574ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 616KB - Virtual size: 615KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ