97b4a9daae17f222e74bf29cb17cb993_JaffaCakes118 | Triage

Sharing

General

Target

97b4a9daae17f222e74bf29cb17cb993_JaffaCakes118
Size

238KB
MD5

97b4a9daae17f222e74bf29cb17cb993
SHA1

f54f977ef4caff7db6876111a2b910c3b0a3200c
SHA256

68942496e531806f99429c1ab642461aa0e25d0046b9bb508d83c36fa72e6bf5
SHA512

f05f2b4c4e783daa51d3e9370b659df6987af8034995e9dd1435d6c1912807fc6ec6c3029d4fe366941dc1a8c9a694ed3a7b3bee266d13e4cc8ef4d90c30736d
SSDEEP

6144:nKpiZHDCvlpsreLv4u5WRFTf9d7LuMet2f0RF3V:nKpiZH+l4UWHfL7ad2f0RN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97b4a9daae17f222e74bf29cb17cb993_JaffaCakes118

Files

97b4a9daae17f222e74bf29cb17cb993_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ