960586bdf44ca1fcb8e80cd5846a77b6_JaffaCakes118 | Triage

Sharing

General

Target

960586bdf44ca1fcb8e80cd5846a77b6_JaffaCakes118
Size

311KB
MD5

960586bdf44ca1fcb8e80cd5846a77b6
SHA1

50d76e219c07a9dc6d7fd827c9fe9f3ef050cfcb
SHA256

92e2cc7980fc342c59860a0e6a16c73f10ee3b0caac53530121e89448933d305
SHA512

1e2676c0357d3d1c1177d36816c84c5157956afc2d0ef30aa4fd0ea3aef3150cec31e3a9cdcd31a6d71b8cd2429973e27584e7a9b8003be475c935e31e1a283b
SSDEEP

6144:su9GzKRez4NQntICmsEkmnzmlkyW0RE/GpQt3m8w2QJIsgozaFLF:dGzTz4NayXixEOpsmXJ/giU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
960586bdf44ca1fcb8e80cd5846a77b6_JaffaCakes118

Files

960586bdf44ca1fcb8e80cd5846a77b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 277KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ