549e7f845117790309446949d7eaae7c_JaffaCakes118 | Triage

Sharing

General

Target

549e7f845117790309446949d7eaae7c_JaffaCakes118
Size

544KB
MD5

549e7f845117790309446949d7eaae7c
SHA1

4623be14eeb5a3d625f3bd8d76644133bba21925
SHA256

1778a255b790b18f042384c6ebb3176d3f3f0fd172d313b07242ac42b000132e
SHA512

b00c33f328b7f4b1a755f461e0041c847b9fa645a3053caad8aabd688296aa086ebc0e7a8d5e69c79a6a67764b09f0990b3d3ce07e882ae7f8ab7c14f0c383f7
SSDEEP

12288:oUGBb2U1v2zv1gVJAMugu0bU8xCiJSKIKSg:Wrc2zrU8xCUXSg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
549e7f845117790309446949d7eaae7c_JaffaCakes118

Files

549e7f845117790309446949d7eaae7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 541KB - Virtual size: 541KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ