3086e81a75a834bec6e0fbf0375b302b_JaffaCakes118 | Triage

Sharing

General

Target

3086e81a75a834bec6e0fbf0375b302b_JaffaCakes118
Size

1.3MB
MD5

3086e81a75a834bec6e0fbf0375b302b
SHA1

44fade609ec03e08ac20d590914f76d4433b6648
SHA256

dd46be64e125711ed76111affed3a01aa3166db5e8d6c23238b1b22cafd800be
SHA512

34cc33b6c572cedbaf3dbd75f914ba96b1f704fae00614a8ed4aab2815e436f78e7214a4a49b9719bbabfd8edaca838ce7a7da489ab8b1bfd18eab11e1f85519
SSDEEP

12288:KzRNRO+Hw3Y06DsIngTPD6ZTzDogsYWZ90Yj+TodjvwkgoaFa:L3VpmS4YjImlp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3086e81a75a834bec6e0fbf0375b302b_JaffaCakes118

Files

3086e81a75a834bec6e0fbf0375b302b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ