b1333fc270e4378a88de9c016c0912e9_JaffaCakes118 | Triage

Sharing

General

Target

b1333fc270e4378a88de9c016c0912e9_JaffaCakes118
Size

836KB
MD5

b1333fc270e4378a88de9c016c0912e9
SHA1

3cc2d548b5c6812b6b7322a64dfbce31bdcb35cc
SHA256

6938bb5b3bd1c8666fef0c03e06d654752a1678888eab3946d7d46afa5f4be80
SHA512

77e84e6538614c4966ce533d59adc0b17e46c54298b1e57e49b476b268d249f49a8bf1b1a9a0a618b2782f7ad6c483178dc6a7b1a69eed6c5fdc8d1526996a5c
SSDEEP

12288:CyuHS2AlG6ollMcsVeuSrMUtSEY1UDLN64zSkK0RVmvXTzPo4dNDX+ZxBt6oLr57:Z0Lca5tSB1U9MkzLmfTc69Xix3JeQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
b1333fc270e4378a88de9c016c0912e9_JaffaCakes118

Files

b1333fc270e4378a88de9c016c0912e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 833KB - Virtual size: 832KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ