7f8d95a40be2afb46b0d6607612f2385_JaffaCakes118 | Triage

Sharing

General

Target

7f8d95a40be2afb46b0d6607612f2385_JaffaCakes118
Size

706KB
MD5

7f8d95a40be2afb46b0d6607612f2385
SHA1

0c00049869559e107d0ba7fa7bdd3751742b9e35
SHA256

e3de17ce0136b0f7d4b4e70bafebad816327439fcb8fe31616e544eda740bb05
SHA512

f4afae413a48f62111ace8613233ced562460ce5cfe5f91a7ee471ca5f2410e6aa9325ace9fb44b02c7ece5bc33231df07f6de3823698bc345d93813f21f8d1c
SSDEEP

12288:GLrU1emH5/VWAtDlJ9K1ecu5mjzCi6cZsrMOWg37uL5WDSCYgnxlNyIRm9v:GLgcQ1zJR5mjuqsRWg3aL5kSCYwZRm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
7f8d95a40be2afb46b0d6607612f2385_JaffaCakes118

Files

7f8d95a40be2afb46b0d6607612f2385_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 703KB - Virtual size: 703KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ