3fe34f063698a191c46aa5d7c954e667_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fe34f063698a191c46aa5d7c954e667_JaffaCakes118
Size

831KB
MD5

3fe34f063698a191c46aa5d7c954e667
SHA1

90772b92e1026144fd0d33d4e1bd682d925c720d
SHA256

fb464022fa2c1b0915bdab49fdf0084a9c2f07c2081ad905195142d48a6b07c6
SHA512

5135c57175e860ae4b3a0b68aba09b05d141d3762bf8a528a5f031a1b9119462dc637e251becc507806f59e33cd006bf081bd683d3518c24780f5f7adfa1440d
SSDEEP

24576:NbQ+X8+UiDLbRHahIUUG2ZwS0QEsX9C7CqBm:bxUUG2ZwJsXtq4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fe34f063698a191c46aa5d7c954e667_JaffaCakes118

Files

3fe34f063698a191c46aa5d7c954e667_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 762KB - Virtual size: 761KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ