fe4f79a87c731022ff87a08dedc5fccc_JaffaCakes118 | Triage

Sharing

General

Target

fe4f79a87c731022ff87a08dedc5fccc_JaffaCakes118
Size

539KB
MD5

fe4f79a87c731022ff87a08dedc5fccc
SHA1

69387e92209bf6820f3daa0107359555ca8bc63b
SHA256

1faca62436ef49b904a73d51088da2aa51825c854f6dfb0916ddebc550d79b37
SHA512

f075626de6bdbf4a3c712e85c9c3f03410e62edf5b6c292eb1cffcb494ac64881297d6b3dba6053e44350f75aa39d8154b686eff7764eb81a631e327fdb78252
SSDEEP

12288:ojYTbhetS4ynTUF7+1lMCYTJQCvFu8SUG0zY:ojGhetSXnTwAl5fCvFnSU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe4f79a87c731022ff87a08dedc5fccc_JaffaCakes118

Files

fe4f79a87c731022ff87a08dedc5fccc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 438KB - Virtual size: 437KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ