c37e3d75cffedf5dfd2710d0741012b8_JaffaCakes118 | Triage

Sharing

General

Target

c37e3d75cffedf5dfd2710d0741012b8_JaffaCakes118
Size

269KB
MD5

c37e3d75cffedf5dfd2710d0741012b8
SHA1

e0ef0f784d7be7b19d1ebe3f37bc0380061d24eb
SHA256

82572bb673e848ff6622ce079dd07a8434290e44499846952ddda1819d315db3
SHA512

c03f377264a544b2b3116b0a4036030e814b907050abd784ebe2ea9170b31c08cb0c253d077495e0b1e1266e6f02299b39d2defa7487d07af15434c9c5d90a1b
SSDEEP

6144:2N2WbGBVmYBOYQma9sRz6l/FS4rJIKNFYST7Cy7BU/OfMkhB:26VmYBOLhsRGtSuIKNFYRiuOESB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c37e3d75cffedf5dfd2710d0741012b8_JaffaCakes118

Files

c37e3d75cffedf5dfd2710d0741012b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 267KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ