c3a9000fb5550b758eaa9c4328386d90_JaffaCakes118 | Triage

Sharing

General

Target

c3a9000fb5550b758eaa9c4328386d90_JaffaCakes118
Size

4.2MB
MD5

c3a9000fb5550b758eaa9c4328386d90
SHA1

479da0354581b62c63f23d849ed559c9eecb6b82
SHA256

75c2b8705c94baf36545a2c8cae4d5079a54beca1caae150f120429080a72f13
SHA512

5f8fea9e7b451e33ec018a5d68bbf476e452bd41687f59ac865a15da1276ec8f148bc9b1a2a1436fa78e4b5845a8f2e29d9296f62c8c1a8dd320bc43db44368d
SSDEEP

98304:mhFtXB4uluJRmMg6QWlIpgi0rHqsih/mCqZB4uluy:IvsJR0TW6yiIKRhzqtsy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3a9000fb5550b758eaa9c4328386d90_JaffaCakes118

Files

c3a9000fb5550b758eaa9c4328386d90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ