1f75e15036d9d6591db209d3a1553505_JaffaCakes118 | Triage

Sharing

General

Target

1f75e15036d9d6591db209d3a1553505_JaffaCakes118
Size

240KB
MD5

1f75e15036d9d6591db209d3a1553505
SHA1

6434bcc0712c30f55901e2836e2d19101234c995
SHA256

f2c65d08942aef7429ba4234116e77906e5d2a015d4c6914cb4cc06853b4dc99
SHA512

09e5f626b08fbd18ee48feecea6d4887d3b4084ba82e5f9bb158d1ac777dbc1303a8e479c137aaeef8fb0b4dfc95be0b53eaa0a0ce6cd1069db2efac7c12877b
SSDEEP

6144:/9YzYoxT1A84TRyMMijEFotGM14x9TW5ujzNP:7OwXMi07M14xA09

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f75e15036d9d6591db209d3a1553505_JaffaCakes118

Files

1f75e15036d9d6591db209d3a1553505_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ