36ce7e480edf16ef12dfd693ab828202_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36ce7e480edf16ef12dfd693ab828202_JaffaCakes118
Size

473KB
MD5

36ce7e480edf16ef12dfd693ab828202
SHA1

56953e0c5937b903f3765365a636562bac6a8a98
SHA256

fc6cd9f895cbad98203c1610c2ac90b9429e686f5378c65ffe3080525f7dd73f
SHA512

82b89eb7c712124f488285d0be452222ac7c3606fa707457deea474f89840f68e409c87c6ecca5570f765ec7eabc7a1e286c3873bc22066f39e802fb95b91887
SSDEEP

12288:noJnCWJdI1XoKFqLkxKZXwQiZADJgzPguh7kezsB:noifuZbXtUqp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36ce7e480edf16ef12dfd693ab828202_JaffaCakes118

Files

36ce7e480edf16ef12dfd693ab828202_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 471KB - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ