3754c78b82ec0e4e5717a7bb6f0f44e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3754c78b82ec0e4e5717a7bb6f0f44e1_JaffaCakes118
Size

781KB
MD5

3754c78b82ec0e4e5717a7bb6f0f44e1
SHA1

7790d694b08adef981992d4c29c832e8d9d9ccf6
SHA256

9b1ab3c4276b3fa0208183222bf6cba030a199f0282920437ebed7f44ed879cb
SHA512

a5c0a556d8b0ae3d92ba22f5305b53c40d35e99ac114be6651dc60b7b664c6607ea95f12999050e57f5333fc10b69764a358310b8b7b24cc2921875c6cfa6329
SSDEEP

12288:lf68IXPopeICUoUpYXN59JOWIs9injvNWifVF3wyxj3:+XPopeICUoUpYXN59sWbibNxf3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3754c78b82ec0e4e5717a7bb6f0f44e1_JaffaCakes118

Files

3754c78b82ec0e4e5717a7bb6f0f44e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 618KB - Virtual size: 617KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ