JaffaCakes118_fd3eba12a7152d8db63aabe18cc4dabf | Triage

Sharing

General

Target

JaffaCakes118_fd3eba12a7152d8db63aabe18cc4dabf
Size

482KB
MD5

fd3eba12a7152d8db63aabe18cc4dabf
SHA1

60993033d749b95b89604cb776f5606dbb77fc47
SHA256

3bd0fd9a08763582606b71a86c2bb4a4fc178559e2ac4e3b9ac999bdc95d65b1
SHA512

d0ccbfbeb6e603984100d002885ef3aff22c1196b7a2819872f9abbe8450c538d6cda6f719be4c42d981df9b48b2b1f670bd828885db32382cb69f2150e15eba
SSDEEP

12288:vUi2iNf4iDBfgew83Kh+wcUJMIs1AX3qZ/gyQBz:vUi1aiDaE6hUUJX92zU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_fd3eba12a7152d8db63aabe18cc4dabf

Files

JaffaCakes118_fd3eba12a7152d8db63aabe18cc4dabf
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 479KB - Virtual size: 479KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ