8c39cc62f2000ecba993c4007eee1fdd_JaffaCakes118 | Triage

Sharing

General

Target

8c39cc62f2000ecba993c4007eee1fdd_JaffaCakes118
Size

1.2MB
MD5

8c39cc62f2000ecba993c4007eee1fdd
SHA1

915d1a8ec37a47219df11fad59cfc6be9dfc831c
SHA256

0b4b49b52c1dcff8ef56a5aacced6534726a4640f1db8e5f443e22acc4041665
SHA512

17d48ba5534c2b9d639c73932d0b45443172ac4548cad87cb1a1e9ac6411a9aaa3e16320cd47985e7caa5137e8e4e7e7dcc49190fe5668f4bdc69ec92ff20895
SSDEEP

24576:EXpbtELnxtirAd1OPg/Q5hjEdi7CtTHvNGl+BIv50S:wbmDxtirAuPg/bKKLs0s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
8c39cc62f2000ecba993c4007eee1fdd_JaffaCakes118

Files

8c39cc62f2000ecba993c4007eee1fdd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 502KB - Virtual size: 501KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 689KB - Virtual size: 689KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ