b58b1dec2001692ecce630ea0de152c2_JaffaCakes118 | Triage

Sharing

General

Target

b58b1dec2001692ecce630ea0de152c2_JaffaCakes118
Size

577KB
MD5

b58b1dec2001692ecce630ea0de152c2
SHA1

7c2d371e56a177cd26dccca2ea854261087c63b6
SHA256

219169459e7a0397184229c00562846c29c4a7cf0e1b27363c0a1fa79b5b84e4
SHA512

fc37e170ca4eee888270042b7d545c9767663ccfc332ac5db23498878bd29ee3d7a827a1a8031923c3160dc5c72c5a4dcabef25cc9e1bae15829c2cb6ad1a174
SSDEEP

12288:jwsK6OCQAvS5a7NqS7EIr5wRCjk0G4Bs:j7KdCBZ7EgTGw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
b58b1dec2001692ecce630ea0de152c2_JaffaCakes118

Files

b58b1dec2001692ecce630ea0de152c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 574KB - Virtual size: 574KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ