61f16c7f16d61d7fdd6b3f04cbf823ca_JaffaCakes118 | Triage

Sharing

General

Target

61f16c7f16d61d7fdd6b3f04cbf823ca_JaffaCakes118
Size

290KB
MD5

61f16c7f16d61d7fdd6b3f04cbf823ca
SHA1

82b0768eee929de2ef267ed5e9d102f53402394d
SHA256

0b3480338209bcea797500207fbdc43af165b9147f3ea3b88930f9a3e91ad1e5
SHA512

7cf7651943a9e0f5f4b386202073b651f75110af080315b5f3cc5d769b8ab3ad0d49c570e0f082eff552bebfc05e8e29cda1e0dbfe6cf9eb8464dc6b2cffe466
SSDEEP

6144:ecnohOTmlL8Reruuuu+uuuuuuuruuuuuuuuXisU:X1y4eruuuu+uuuuuuuruuuuuuuuys

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61f16c7f16d61d7fdd6b3f04cbf823ca_JaffaCakes118

Files

61f16c7f16d61d7fdd6b3f04cbf823ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ