fa4940b0a236ff804f909c42b965572c_JaffaCakes118 | Triage

Sharing

General

Target

fa4940b0a236ff804f909c42b965572c_JaffaCakes118
Size

737KB
MD5

fa4940b0a236ff804f909c42b965572c
SHA1

aea87158e10ca3fe2e44cc51bad5b92bf86c8605
SHA256

f6ca5975931a975e167e665863ba4ae3be48db585117bad6d4eb833fae8491cd
SHA512

8c611dd5cd481c1e1df1afc95b375677976268f4677969fe3c99e66f624f5f6354406688882df45796567b1a14ef83cabda8a8522c8c8a0fa1fd18a6c2b9b526
SSDEEP

12288:HjYTVR4/R6WGZEaDDomXa/ZoN+Zxh/IGvBpt9VjW:HjjRRXgMm2oN+Zx9dvBp3VjW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa4940b0a236ff804f909c42b965572c_JaffaCakes118

Files

fa4940b0a236ff804f909c42b965572c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 431KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ