504ba86d8f217beb5a4b7369f6196bad_JaffaCakes118 | Triage

Sharing

General

Target

504ba86d8f217beb5a4b7369f6196bad_JaffaCakes118
Size

782KB
MD5

504ba86d8f217beb5a4b7369f6196bad
SHA1

547b7e0de9123c925deffdb7e0027ea882f2800e
SHA256

df81bbe117427465d686953ca5eb53df60c0d6e0e40648611df5eb7928a77da6
SHA512

618ab38686239e31a764252cf46365267876abac32eab0fbc4c651c0eec4883e5fd1b63178b015da9b3232738d953cdbea690f0d95bc42cd2434d104c3495488
SSDEEP

24576:IX2c9UPrSe3SWdgcE7H74c1i6iKUvQBO:ImmUjSV4cBiKDBO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
504ba86d8f217beb5a4b7369f6196bad_JaffaCakes118

Files

504ba86d8f217beb5a4b7369f6196bad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 779KB - Virtual size: 779KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ