c986d6ee6ab402357f664cd538d4b56b_JaffaCakes118 | Triage

Sharing

General

Target

c986d6ee6ab402357f664cd538d4b56b_JaffaCakes118
Size

237KB
MD5

c986d6ee6ab402357f664cd538d4b56b
SHA1

2f38d9b598af69c9f9a741f394633fa5a8323e7e
SHA256

89812cb15747b9bb084555232727d2ab647f5d5971d7949ce13f8705f4125d5e
SHA512

e8e77e55d08cea611730aa384c31cdcf162db15554e7117214703fec1e6ba71daf4f89494690b20aa28bd8c8abe2640331391401c20f541de6d5190174168a8d
SSDEEP

3072:L2rQZxdLW4Jaluyzt9SoVMVTEWeeIVYr9m8Y1+bSIWJyb80XJKXs1P5evsBJ:rW4J4VMJEjY9mN8bHtMy5eED

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c986d6ee6ab402357f664cd538d4b56b_JaffaCakes118

Files

c986d6ee6ab402357f664cd538d4b56b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ