34589896600a5f6e9efc6f5db4457929_JaffaCakes118 | Triage

Sharing

General

Target

34589896600a5f6e9efc6f5db4457929_JaffaCakes118
Size

375KB
MD5

34589896600a5f6e9efc6f5db4457929
SHA1

859eb8b5abe189986fba4226966525167066e5cc
SHA256

feeeca7d0a8f26e7698d15197a74c065cf4e2bd847886d39f60a242c4506ce23
SHA512

5bd4e44353d01f11b03c6862603a2996026f4998802be5cea1b6b39f5d4cffe7b106d8c2d2f05bd9c9f8b71f7e7be510bc53aa1bd292d0c490c3fd9235630bbd
SSDEEP

6144:nlXTcH1fu9uKdgSZvy4raeXjuMkqryNPs0t0Ooqn9onD4Epv1O:nlD4fqRBdy4r3XyMb6U0tJx9onD4Eh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34589896600a5f6e9efc6f5db4457929_JaffaCakes118

Files

34589896600a5f6e9efc6f5db4457929_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 373KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ