88bbe622fbf8eb6472d0920dd9bf3535_JaffaCakes118 | Triage

Sharing

General

Target

88bbe622fbf8eb6472d0920dd9bf3535_JaffaCakes118
Size

834KB
MD5

88bbe622fbf8eb6472d0920dd9bf3535
SHA1

fb650922398f81dc01d93ec5506d540ef139305e
SHA256

7ae33c88444c868c904b1c7a7803caf98e4e395939c208bfa3a255dced82f83d
SHA512

0f1ab4e2117317914838e0936b1860e59d0cc19bb9c5b7791cf38b2f9d18a84f4bd346115921f31b6f484c5906e19a6e8e3261a105b9ff61aa9c0f2972973f40
SSDEEP

12288:i/8ukXmsdmMGgc5AzN7vF8Ea+evwg1GhO2UA6GjA6pW8etkuHrr/VqmiIs:HaX5y/6vwhO2v1FpPetkuHrr/UmG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
88bbe622fbf8eb6472d0920dd9bf3535_JaffaCakes118

Files

88bbe622fbf8eb6472d0920dd9bf3535_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 765KB - Virtual size: 764KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ