18760eae1da56df4e02c96e6a00781b6_JaffaCakes118 | Triage

Sharing

General

Target

18760eae1da56df4e02c96e6a00781b6_JaffaCakes118
Size

596KB
MD5

18760eae1da56df4e02c96e6a00781b6
SHA1

e7baea61816c90f8047edc46f9b591e0f28cfdbd
SHA256

86481521ec3a1fe780a6dab70518eff29453017674a6c34b606822220d52fa0a
SHA512

404379e1a60f3357eabf3603dcea25ac2ba2ac0012726e3ee9283afd2bdb9c1e6f2b870be2595eff9f4252f4ed59dfa8930131646efe2c324dd356409dcef637
SSDEEP

12288:LLaqQBLPSHeiB9Ea9yb1hHrDYJ5YBGwCbRfB8dCFD:aPPSFgaefYJ5NoCF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18760eae1da56df4e02c96e6a00781b6_JaffaCakes118

Files

18760eae1da56df4e02c96e6a00781b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 584KB - Virtual size: 581KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ