42bf04f09192ca1302a41411496f1f75_JaffaCakes118 | Triage

Sharing

General

Target

42bf04f09192ca1302a41411496f1f75_JaffaCakes118
Size

325KB
MD5

42bf04f09192ca1302a41411496f1f75
SHA1

5850205fbb6bfa7c8ae00adb53609f15289bedeb
SHA256

76b2f6e0d60310ea7c6a44ac62dbd253e3bb8fc0003a761bfc4085668f97e1f0
SHA512

f668775fc44a63bb001cf1b704cf1bb28bb65da563c375e11ef9f182ae26d9d3db34a2357c5e01ebfae42fd0fef6668299e217ab300178d0695f425f62ec1914
SSDEEP

6144:vKoPkxUCStVn4CsxetbthwWdBhBvoBiI9/Oa8Tc0HtmkW1MlQPQrLd++A6:ioBtV4UZviiI9/GNmFSaoHdPb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/VIIIIIIIIIIIIIC.exe

Files

42bf04f09192ca1302a41411496f1f75_JaffaCakes118
.7z
VIIIIIIIIIIIIIC.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 906KB - Virtual size: 906KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ