07ce9d3bbe1fe9acd95736a0dcf6d10b_JaffaCakes118 | Triage

Sharing

General

Target

07ce9d3bbe1fe9acd95736a0dcf6d10b_JaffaCakes118
Size

479KB
MD5

07ce9d3bbe1fe9acd95736a0dcf6d10b
SHA1

c460ba32991c23c270e7d430e0348f067081a523
SHA256

97d951e31b6e8adcc6edf8d0f7a596f5119d1385d0657a3f63414f6113614219
SHA512

05ed68abc52b3727b70a66bd682dcd9f17517e8ea753d20d9bcd9662fe4b9d87eb039c165ac80e45fe0c7ab02e9fa0971708ec917351f02b61118a25f7ad4fc4
SSDEEP

12288:aIn6j/Pqv7lufe/Fy5Uqpb9b45cHuymXml:TnUyyiYOGhgcOw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
07ce9d3bbe1fe9acd95736a0dcf6d10b_JaffaCakes118

Files

07ce9d3bbe1fe9acd95736a0dcf6d10b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 474KB - Virtual size: 473KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ