d8941c3902bd66750b5ec217816ef5f8_JaffaCakes118 | Triage

Sharing

General

Target

d8941c3902bd66750b5ec217816ef5f8_JaffaCakes118
Size

609KB
MD5

d8941c3902bd66750b5ec217816ef5f8
SHA1

1ece57aa7ff86651be4ecc6250f8370004141afd
SHA256

16bb427bc8d68658c2ce3423ef17b29e6fba35b4dc9f0759f1544b2599612438
SHA512

f91ffa71c83778232feb00ecbadcc09386deec9cc8e3668aaf13e33c6d716c90ad1da276863e6d54321b8deed47c6c9293fea98c9e3e4619ece1369aa3b79469
SSDEEP

12288:yhvaUdWf4iDI4/ahOjy9W0l7Ap5gywna0:aiUdvXIahT9W/gNa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d8941c3902bd66750b5ec217816ef5f8_JaffaCakes118

Files

d8941c3902bd66750b5ec217816ef5f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 607KB - Virtual size: 606KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ