f2fd8d915f1c19cdaf327fbae2ce67b3_JaffaCakes118 | Triage

Sharing

General

Target

f2fd8d915f1c19cdaf327fbae2ce67b3_JaffaCakes118
Size

776KB
MD5

f2fd8d915f1c19cdaf327fbae2ce67b3
SHA1

b5c44f47db3238dbe24cd65b5d9f65df878df1cf
SHA256

87ed05c89f05fe601cc3bf4099e0a0ff7f7eb7cfe8bfb12156ef607e8235c523
SHA512

510ecc97743a70fe4200c2bd256941477a7898e600af4d9082d05c5f0202ad7d7a3afeb146562496c6d48e3ec765cd4c04b12e169e03a6c8ea2faa18b02bd439
SSDEEP

12288:8GONhyghjz64gg0DnR/plwH0vCAZae0HGJP9/37E59cv8Ryw+Xey6X:8M4AxSY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2fd8d915f1c19cdaf327fbae2ce67b3_JaffaCakes118

Files

f2fd8d915f1c19cdaf327fbae2ce67b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 764KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ