034008990065401ec63abc900844ddc0_JaffaCakes118 | Triage

Sharing

General

Target

034008990065401ec63abc900844ddc0_JaffaCakes118
Size

876KB
MD5

034008990065401ec63abc900844ddc0
SHA1

d0da539c9ad7c38570bd758d18aac526dd0134c7
SHA256

a3de8af20fc5e7d71b9ad01d5e6421df29a8709c498145cbe0c599730eb6c286
SHA512

05ad8546e952cbaefb2480a698acfbca8742da62b21dc198a875ef92a0059e503543ae227263c7c8924ef43a4eb51b48b97e9456ea29dc36ff237e8e407fe399
SSDEEP

24576:Qdoj71WdnU4nuF3s4JFEeNePoEo9hTlDg0wutGgjT:fIdUiRUaoTtlXjT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
034008990065401ec63abc900844ddc0_JaffaCakes118

Files

034008990065401ec63abc900844ddc0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 780KB - Virtual size: 779KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ