32d014383dc718592281576b124903a4_JaffaCakes118 | Triage

Sharing

General

Target

32d014383dc718592281576b124903a4_JaffaCakes118
Size

745KB
MD5

32d014383dc718592281576b124903a4
SHA1

287d26e8f453a3b7090bfa4bbf819383814c7b4c
SHA256

36c5fdcf5d8394ae269554001904c4557136627c80e1a8e250571bd52ea6bd81
SHA512

028fc07c36a5109eeb0fb9694750c428b5f847ce5802b1a84a5c5814312b98815142bd9f61f184d3deb677dd315031354533d902094854f60e4d230824e191a5
SSDEEP

12288:UEjIh5hsLnEjIhTAkAMTvK5S8FeoLCthvomJ4YJGpy7mpo:UHyLnHSZ+t55VJV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32d014383dc718592281576b124903a4_JaffaCakes118

Files

32d014383dc718592281576b124903a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 297KB - Virtual size: 297KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ