f7faf6be5b9849427a1ee4696b8cb1e6_JaffaCakes118 | Triage

Sharing

General

Target

f7faf6be5b9849427a1ee4696b8cb1e6_JaffaCakes118
Size

1.3MB
MD5

f7faf6be5b9849427a1ee4696b8cb1e6
SHA1

5be4d26db897e74b00fcdada2a3070f63ce26a2f
SHA256

67ee67d34cba62e2085e263a40270eca216901400832c3a0b1527f0b3dde0434
SHA512

4aba6767584c65e77135cbf9a29b01586f84ee2401680b084dfcd32d41ff7231fb38083f234def0a51869e0eb1e5318bcccb07eb0cd97476f67b85bb1e9452e0
SSDEEP

24576:IoJB6F5PeYViLGxrlqL5zQKNLSb3cZX69jbh6gJz8HFtWJ16x00BwLLd0D:Io36F5WYVeYl3KNL7oNz8HFtkox00BwK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7faf6be5b9849427a1ee4696b8cb1e6_JaffaCakes118

Files

f7faf6be5b9849427a1ee4696b8cb1e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

InfoExport.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ