3e242d2738ce8a6df87d93b5a303e003_JaffaCakes118 | Triage

Sharing

General

Target

3e242d2738ce8a6df87d93b5a303e003_JaffaCakes118
Size

544KB
MD5

3e242d2738ce8a6df87d93b5a303e003
SHA1

6e711bef1eb48c47db98c5fa7aa3da42132eeadf
SHA256

9db25ab2d6f1e37d2cbbae35e5e2e838939d523b512d54639a3bb13b1120b5ae
SHA512

1f22f1eec81e9e6702cd2eee6a08f4222517cd42fe315ede8ef182201b85902aa47e68e067e7e21ce5a3223544f29e5fd0e6a2017531db68899748587840435f
SSDEEP

12288:zyAEb3J44XuJjKD0baZkm+3VsDK1NnBeWxxXY9k:z4XuJ3bad+3VsDAk0xXCk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e242d2738ce8a6df87d93b5a303e003_JaffaCakes118

Files

3e242d2738ce8a6df87d93b5a303e003_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 540KB - Virtual size: 539KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ