4be78778b95db24d4cda8bc8c6632a9e_JaffaCakes118 | Triage

Sharing

General

Target

4be78778b95db24d4cda8bc8c6632a9e_JaffaCakes118
Size

506KB
MD5

4be78778b95db24d4cda8bc8c6632a9e
SHA1

57bda1e769ad08bbbf16cb601bd95fdd39ab6488
SHA256

019d0df10ebc5946770e6ef2ab9c559702f1a44c51894be4f26387af5a970649
SHA512

f32fbdaa85f64f83cb670bc37298e629b9d69b71779aa79399ebb8d66f02f6edc4ff277a9d6f3c295a9d59627a81904b9d3d36449db033b60be6841f86e24355
SSDEEP

12288:9onsicAIZ6M4i1/umviyeuG5tAsqnr6yVFp1zlGCOWr9E52TZeloN:GntBe2W+PuzlGCpO521eq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4be78778b95db24d4cda8bc8c6632a9e_JaffaCakes118

Files

4be78778b95db24d4cda8bc8c6632a9e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 364KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ