18844a8dba4723e61fddab130b383ae3_JaffaCakes118 | Triage

Sharing

General

Target

18844a8dba4723e61fddab130b383ae3_JaffaCakes118
Size

235KB
MD5

18844a8dba4723e61fddab130b383ae3
SHA1

c9efca19489dbd0ec7d6c4c213643aa93cce63f7
SHA256

19b696ef827032eaa55fabd7a93f7c73c36fd152adf9269a35172a1ad8e07a45
SHA512

7b7fd49cb7d0b1dac305a42674386ac16802c5b2a9abce4a8a3b519a17aba9a8187fad24d7d844297c243ec769e8b3dfc7b188c81df8d9f059739a53e03f6dc5
SSDEEP

6144:wb4n3bYnAEI8d39ajPOzOIvpx69xUG3ggJj5ejPOzOIvpx6d:uWEA8+O7px69OkJj0O7px6d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18844a8dba4723e61fddab130b383ae3_JaffaCakes118

Files

18844a8dba4723e61fddab130b383ae3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ