3e1e988562a1311954d16b37f11801d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e1e988562a1311954d16b37f11801d7_JaffaCakes118
Size

266KB
MD5

3e1e988562a1311954d16b37f11801d7
SHA1

049e3112886a97224cc5054f3960571a7b033600
SHA256

ca55f3beda749aeb172bc7277e2e84964b2c6e9d3e3ea86df51f94c63669532e
SHA512

c56eb6044566fd51376842958d4e991965b5a5e6f05e81c923631667ada69b88471b21e6c36f1211f5a8688fecbe8818ef1b7756445e1fac4d81babbe50df444
SSDEEP

6144:bCQfM0GU7vTAqHc0WSuzQbI7KZJUpmkLO8xiyQvs3Ccnt2j75LbGRXOk+lcjkrEg:vKM9t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e1e988562a1311954d16b37f11801d7_JaffaCakes118

Files

3e1e988562a1311954d16b37f11801d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ