04bea2bf948e225463ca53d5f00ec1e4_JaffaCakes118 | Triage

Sharing

General

Target

04bea2bf948e225463ca53d5f00ec1e4_JaffaCakes118
Size

189KB
MD5

04bea2bf948e225463ca53d5f00ec1e4
SHA1

0f1c7993def995d191c8cb33cc36a8c4a3de3ac4
SHA256

413755abc9367e902c8a8c44eca854181d49b8c6d51969f114f19a57eb4f2bc1
SHA512

5b93dcb00137eaf8686af97b02693c75836a8f7129208ef4b37a4cc5d538443e1ec84d0e4193fb504c9174688ce07b72a7d0fcf4fdbe375142ca3495b6b3a93d
SSDEEP

3072:neOeS5ZlkwcAknM9sCMrb9lb5BL2EqSkkVFbCeB2pungbyffDUL:nzvlJcAkiibtLVvzBE8gbyT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04bea2bf948e225463ca53d5f00ec1e4_JaffaCakes118

Files

04bea2bf948e225463ca53d5f00ec1e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ