2bed73b384656f628e9ad4132459510f_JaffaCakes118 | Triage

Sharing

General

Target

2bed73b384656f628e9ad4132459510f_JaffaCakes118
Size

148KB
MD5

2bed73b384656f628e9ad4132459510f
SHA1

4b18e9276c3eb20b90faaf3c21e04172ad428316
SHA256

a531c89df5fd178d84f25932fef710baf6a6a47a0b157879e04bf78aaed06907
SHA512

055436d2e7a26a19982c34b25ad06aac818952003036646b859ff76c1b7cbaf72c3cf9a2599034571e2aca903a67ea9aa3927940c5e46eff94c4bd5df31c530f
SSDEEP

1536:tznc+7jZBkSgrVRS6RQgfBbJJgcthbiS4HQFYpu0TQ:Bnr79BjgcEJJgcthbiS4HQFYk0TQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bed73b384656f628e9ad4132459510f_JaffaCakes118

Files

2bed73b384656f628e9ad4132459510f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ