3c6392f463186502fd3ef212dd9ffba8_JaffaCakes118 | Triage

Sharing

General

Target

3c6392f463186502fd3ef212dd9ffba8_JaffaCakes118
Size

395KB
MD5

3c6392f463186502fd3ef212dd9ffba8
SHA1

a77b8b9ae95cf3512eaedcb26b8d1949ae482686
SHA256

cb3056bb2991eac62d5185c9b09b1d2e9686f7b040966b9f46e9f05af8ab163f
SHA512

db10a82f1c56427e7cde2e195fbbba0cd23745e00bdb74c8b849304cdfa171f7052335c49f1eace329717cf9bec2fec192729d2751fd32b814eafd7cd0f88514
SSDEEP

12288:LjA/PSieao+DB0/vXDYHjNKm8ItKVxLW:UP3eaZN4zaNtrwxi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
3c6392f463186502fd3ef212dd9ffba8_JaffaCakes118

Files

3c6392f463186502fd3ef212dd9ffba8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 392KB - Virtual size: 391KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ