30e9206ec9838aac54167888768f4911_JaffaCakes118 | Triage

Sharing

General

Target

30e9206ec9838aac54167888768f4911_JaffaCakes118
Size

819KB
MD5

30e9206ec9838aac54167888768f4911
SHA1

5124426ce06d24545b6c2675d002dd81065fdcdc
SHA256

aaf19aea750aad14cca5ccf1e3b9fd8eccc0d5065b73780ffdb9889f47246eb6
SHA512

3af1ef2bdd98bfb2347787dbd75edfbae6437204573936aefd20887f9944d39e9fcad658b5a772a358c2d3d7855f8dc3658cf3292167ac33ec3a66bd66518370
SSDEEP

24576:UiDCC7a4syWe2U/UKJlKlxtB0QdasKtfKnrzi0:U/f4sy12U/UKTKbbvK0rz1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
30e9206ec9838aac54167888768f4911_JaffaCakes118

Files

30e9206ec9838aac54167888768f4911_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 816KB - Virtual size: 816KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ