3988e82c18ce240d4ff5b505e52bc4d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3988e82c18ce240d4ff5b505e52bc4d8_JaffaCakes118
Size

458KB
MD5

3988e82c18ce240d4ff5b505e52bc4d8
SHA1

21ea619d7f53aa299f87595ba89ab22b1b0b794d
SHA256

d30feb6593039603d08b23cb255ceccf37915ba06922164db9e41266daa88877
SHA512

3315011c8fe1ffa9fe9de356a31927bb3615628b921eb85a0c4a5fe5fcbd5ea46e5b42162681b746243feabe10529ec40396d82aa02983420a0f81313326bf58
SSDEEP

6144:NihMjS1E44JCQrYHLapiuHjNG5HuIxwfZk:N3jSatYQrYrapBjNG5HGfZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3988e82c18ce240d4ff5b505e52bc4d8_JaffaCakes118

Files

3988e82c18ce240d4ff5b505e52bc4d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ