4c17d60ff66bcf8649f95c1051cdb6ba_JaffaCakes118 | Triage

Sharing

General

Target

4c17d60ff66bcf8649f95c1051cdb6ba_JaffaCakes118
Size

258KB
MD5

4c17d60ff66bcf8649f95c1051cdb6ba
SHA1

dec6bdb527d90ce6cd16b394d8329a5323d74d52
SHA256

93c5a1d15b9e56491cac278b138a68a8a71fe0274e1e1619f226a829a492d9f0
SHA512

ae881178b513fc56b7a162811d9917c32d60f74694f06ceefb20c0030ba267227e5b746db382b39870848558349e869bf2671dfd5a5b6868467511b1c67bd63f
SSDEEP

6144:HhqvucbF9AwphUegCEe9dbAOSFGQQytBWoL:Hhql9AuhrwGAOSFUYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c17d60ff66bcf8649f95c1051cdb6ba_JaffaCakes118

Files

4c17d60ff66bcf8649f95c1051cdb6ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ