1c4432e4819d40ee50ec3e257016b3fa_JaffaCakes118 | Triage

Sharing

General

Target

1c4432e4819d40ee50ec3e257016b3fa_JaffaCakes118
Size

700KB
MD5

1c4432e4819d40ee50ec3e257016b3fa
SHA1

d550295bcd5d52d580ea8e0688f37bd5c5b4e0a8
SHA256

1964432ca1af473893d804ca11c746f611eb1a1854efab16dc20eeb6a297ebe2
SHA512

e93e0e6957aabef915e7a1ba0e375a1b42dec203872875da88eccd096e6f5863e03ab3dd2dcdb7dbc0253a1866c108052c127d5c25e0733b27205c172b0c440f
SSDEEP

12288:5gXuycBnb0uafX0iKM1wIOXSTfP9/v1QL8lpKB:5gfcBnLGBOizPxvGolpO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c4432e4819d40ee50ec3e257016b3fa_JaffaCakes118

Files

1c4432e4819d40ee50ec3e257016b3fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 580KB - Virtual size: 579KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ