83c11e7d4fcf13515fc5be9938dd75be_JaffaCakes118 | Triage

Sharing

General

Target

83c11e7d4fcf13515fc5be9938dd75be_JaffaCakes118
Size

641KB
MD5

83c11e7d4fcf13515fc5be9938dd75be
SHA1

5b1267583abf7803a20aa63bc9739894ee567c31
SHA256

df9ce9ef0fe2c633c368b9859f6f88672b5be6867c52ad54d6b7ab42081893fd
SHA512

6b07e7e369554e6bbe036263ef93fe2019606d8ac68049bc44b03dbcaccc5e4f47975fc59d5d54a9fde6bfced9e51f44340de1c8bc3e92f6cbbf84c99fb5f2b2
SSDEEP

12288:Yezd3qC2zcJ0DrpE5zSHPWEuB+wNaSctMX:YeRahzZpozSHPWEuBWM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
83c11e7d4fcf13515fc5be9938dd75be_JaffaCakes118

Files

83c11e7d4fcf13515fc5be9938dd75be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 381KB - Virtual size: 381KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 259KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ