2fbdcb8c8deeffb7465724c9b3ec1261_JaffaCakes118 | Triage

Sharing

General

Target

2fbdcb8c8deeffb7465724c9b3ec1261_JaffaCakes118
Size

1.6MB
MD5

2fbdcb8c8deeffb7465724c9b3ec1261
SHA1

dadeb8ff6eebbfa07c39a1d21050ad7e29f1a124
SHA256

420f8e2dc2c3665e72e0ae2af45300cfcb5d61dd450fa2b454585056cf5b0485
SHA512

da1262c42b73592b186082fdcbfe3f8d8e48600833ef6b94e87b6317f79db57f9219900e903f2c36746f77bc757be5d58ee78f9ce913b6e41454033f60a2d9df
SSDEEP

49152:yq0NJpgchf2zCzjyY/EEhuQXLBXLE371dPC:yF02zjJcEhuQbB74C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fbdcb8c8deeffb7465724c9b3ec1261_JaffaCakes118

Files

2fbdcb8c8deeffb7465724c9b3ec1261_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1.6MB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ