905532e75330bc062a287309ef93226d_JaffaCakes118 | Triage

Sharing

General

Target

905532e75330bc062a287309ef93226d_JaffaCakes118
Size

564KB
MD5

905532e75330bc062a287309ef93226d
SHA1

29f377d1667c6a72dbebee6876c04713c2eac1b7
SHA256

866e6648d37bd033d8bc7c18627b44c3ddedf53396de7b1faefb04821c97fad4
SHA512

42063865e698f4f930c1260a03fd2b210a0f69858b37f7c90b2c56489dd1d71d5da1092dbab2b77af1272800e320dc71154f3028c5cd4593e17163a2a14aa206
SSDEEP

12288:C42hmbdSGZmDm8/jEzOcQA+NzTHzCfN53As47Bp/9S1LX8m+kG3eCuMOu36twUn:C42hmbdSGcDm8/AzOpA+NzTHWfN53AsN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
905532e75330bc062a287309ef93226d_JaffaCakes118

Files

905532e75330bc062a287309ef93226d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 468KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ