c35701db9ac9d8b75bb57b2758363804_JaffaCakes118 | Triage

Sharing

General

Target

c35701db9ac9d8b75bb57b2758363804_JaffaCakes118
Size

640KB
MD5

c35701db9ac9d8b75bb57b2758363804
SHA1

fdf6f6997c0dd7228a904d70a2cbe97151c3405b
SHA256

2d5fd822f5e87ccaac8fc9a90050383aed0e32abc3d54378357116771291af05
SHA512

63562fb8154017a61a3e64fbd9c09494c6e87ba0b50352002be6d2c0e4e036caa89bf7212ef8cabb5936a2680fd5ad0a3cda6e87e97854039db53e01ee34db26
SSDEEP

12288:av/AYnEyHWiaHzNwsQg/8wvUwLywNaSctMX:kYpmQ8whiM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c35701db9ac9d8b75bb57b2758363804_JaffaCakes118

Files

c35701db9ac9d8b75bb57b2758363804_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 259KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ