ffbcc78612502da6d4b7061ec1487fcd_JaffaCakes118 | Triage

Sharing

General

Target

ffbcc78612502da6d4b7061ec1487fcd_JaffaCakes118
Size

199KB
MD5

ffbcc78612502da6d4b7061ec1487fcd
SHA1

8d28ceb24558aadca7b9e0bac15a8e2615182945
SHA256

8e7eba92ab038f6a5ae941c56c76cb88152c82f9077d4e86131457a9b196c080
SHA512

31673ecbd58a79f36f6ee881300548a25bbfd2690b307de2a13eb48c35e11f481c8a00214ab0beca196a4cdcaf6d9589526ed0f2de13d33bd5d669d714343ee1
SSDEEP

6144:sqoD6y5v1FrCTViWtfoV21ehSiuODnxwt:sqq6y5vfslxoYEhSLOTy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffbcc78612502da6d4b7061ec1487fcd_JaffaCakes118

Files

ffbcc78612502da6d4b7061ec1487fcd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ