450d8c68e01b7c086e5d195a594a5ad4_JaffaCakes118 | Triage

Sharing

General

Target

450d8c68e01b7c086e5d195a594a5ad4_JaffaCakes118
Size

260KB
MD5

450d8c68e01b7c086e5d195a594a5ad4
SHA1

06fffef49449302cba0f659ae6221150e3cfa163
SHA256

a84ea5c3902e7e6d2d4ace96b238e43d79054295b18426a73bfb9f5877f532ca
SHA512

f46bd8231342a6ee2ed0709f6d08d00f6dd92e130214b2f7fcbfcbe9d1acb92709d96a199284f634826e3d65b4c4b29b6d3290b42cfc20cd06d2f91c9e5ed509
SSDEEP

6144:QAeZHGAD/E/iG5UzMh2msfgB9mnkDO9L:zeYA4/icSRmagmn4O9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
450d8c68e01b7c086e5d195a594a5ad4_JaffaCakes118

Files

450d8c68e01b7c086e5d195a594a5ad4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ