a4e04fcc301833211359e575150cc7cc_JaffaCakes118 | Triage

Sharing

General

Target

a4e04fcc301833211359e575150cc7cc_JaffaCakes118
Size

656KB
MD5

a4e04fcc301833211359e575150cc7cc
SHA1

815d3f4eb2029ec80408bea43fb1e1febadadaf6
SHA256

d2d3f197a13bdd19a00bc0a2e1de1704f3103142d723b0a6a0ab522aa0bd4524
SHA512

82ec43e69b86c26aec4f2b22e25301259f9ec00fdb1e9b3c67699a71dac04d1b6148f1a01f0922832b99d631ae5e292cf020a6e0054ddaf056a25b1b49add376
SSDEEP

12288:k5bTxmvjcBEEnpMuWtlVQOGKxWd1zmFCWNshg78cBhjr2JWH3Qx02U:6bTxmvjanpRy2K8d1zmI4shgP5rxHgxQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
a4e04fcc301833211359e575150cc7cc_JaffaCakes118

Files

a4e04fcc301833211359e575150cc7cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 521KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ