2856d558fcf39a06f6859580b903f006_JaffaCakes118 | Triage

Sharing

General

Target

2856d558fcf39a06f6859580b903f006_JaffaCakes118
Size

17KB
MD5

2856d558fcf39a06f6859580b903f006
SHA1

3b6972b0d85ae9909abd2069ca48ae8ef734c863
SHA256

e55a2a55c63be3f6a6e2f8b23391873abae43e2c091a1aaa11cfa7fa8e62a98e
SHA512

3df92ea449d8bf42f618b3b65edd39b161d3d0a89338217b30bcb1f8cd635bef84726b005737fc196128e6459170f800674e89f9e77a8a353fbfd9710c31b2ba
SSDEEP

384:84Mf7pOZDPtfiDpzaDSbm74Ah8TSD1+KO1i1:84QQ7ZAfg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2856d558fcf39a06f6859580b903f006_JaffaCakes118

Files

2856d558fcf39a06f6859580b903f006_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ