42f23948167db0d7c4ec4beeb242f219_JaffaCakes118 | Triage

Sharing

General

Target

42f23948167db0d7c4ec4beeb242f219_JaffaCakes118
Size

888KB
MD5

42f23948167db0d7c4ec4beeb242f219
SHA1

9cba44b4fb6db9fbb07837cbc46b3c7b55ceb9fa
SHA256

8942941857c6d0053612c7a1afca3dabe2a5ea563272f300ad3a9e016c24fa67
SHA512

e7b2984505143db7554e2f4e389873599bf8962d8073471ff33b9a79163a8a672b2de582a9b4b968a573fdc9b4f6681fcb2a845dc02b01e9b2cd7e7cdbe575f7
SSDEEP

12288:8ygkNs9Myb5aT2pb8OXAy10t1ezn5Ptyv8MgBBl:RiOoW0Dzn5U8Bl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42f23948167db0d7c4ec4beeb242f219_JaffaCakes118

Files

42f23948167db0d7c4ec4beeb242f219_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 876KB - Virtual size: 873KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ