ab9e2bf770b723bace825313e41f3c35_JaffaCakes118 | Triage

Sharing

General

Target

ab9e2bf770b723bace825313e41f3c35_JaffaCakes118
Size

664KB
MD5

ab9e2bf770b723bace825313e41f3c35
SHA1

f1ca1499577341a5db5ad7d7a4073c8cf281fc19
SHA256

a549e92b9e4b8ef9730d225b92a6c599e842b4cb94cb56866bc1601b4f1c6b29
SHA512

0529602a775e449c7ddb2a98ea992aeff0ac41007b0f581f08fec12da0a34ee78f776f176c882963c122eb172103ab3b92151c821b24307c4f6319e995fb883d
SSDEEP

12288:eO14eIDPUS6PZnOuyWGUW4duBd3X3uIIIkIxV0DT:eOCoPLVGUW4gBd3X3B+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
ab9e2bf770b723bace825313e41f3c35_JaffaCakes118

Files

ab9e2bf770b723bace825313e41f3c35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 382KB - Virtual size: 381KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ