abb7d2d64ee38fb8fb9b0191126a280c_JaffaCakes118 | Triage

Sharing

General

Target

abb7d2d64ee38fb8fb9b0191126a280c_JaffaCakes118
Size

447KB
MD5

abb7d2d64ee38fb8fb9b0191126a280c
SHA1

c586ef2a76ce32d55cf213e56e377f05d8b0ab51
SHA256

c9276a78a7dfb0c9dd3f5c19c5da3c965e0e63ab9c02b6192edb2c7dc21e7b9d
SHA512

ee3d20c9db57e02d1c1ad28c960334991acf2cadb395d7de35f847c93a6f5ddb1006c929c87c7d277756c82f97efb026fbd55062cd5340ef250f10fe0211d91c
SSDEEP

12288:kywn9vaSJgiwiKzHrIbXTpLFiYhI04kMTJ:9eKIDTpLFiYO04kM1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abb7d2d64ee38fb8fb9b0191126a280c_JaffaCakes118

Files

abb7d2d64ee38fb8fb9b0191126a280c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 413KB - Virtual size: 413KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ