187f3205d9e93cc6428f7f0012114020_JaffaCakes118 | Triage

Sharing

General

Target

187f3205d9e93cc6428f7f0012114020_JaffaCakes118
Size

428KB
MD5

187f3205d9e93cc6428f7f0012114020
SHA1

78cd864d6b978c9387a6da3e166197c462bbe50a
SHA256

d1c2ba4d64233edad97a44cc56d345c7ba0448a4a75c6cfbd91feb96a4614a98
SHA512

b0dc61f394941480f6256102ece65bd73be5e81a8cb708f90711f422a008e74f5b3c73a0e1c209f18a435802ed2b167e40c24ddc74995f33cbcebefaf8e32550
SSDEEP

12288:cKjNTqGkyKINYFLubXENSX9aD0hxujcW:1rZKC+LuZX9/kc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
187f3205d9e93cc6428f7f0012114020_JaffaCakes118

Files

187f3205d9e93cc6428f7f0012114020_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 416KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ