639ce84468b5b67681d9e3341b1446af_JaffaCakes118 | Triage

Sharing

General

Target

639ce84468b5b67681d9e3341b1446af_JaffaCakes118
Size

591KB
MD5

639ce84468b5b67681d9e3341b1446af
SHA1

e9ed555487307f27784b70fe0641950eb06c7f51
SHA256

52d84c8469d2288d1e072e39828caaf9b43911d5530a98d1af6bce4fa7addb8c
SHA512

3bb85fa2c2d80bde2003f8238e10be39776c68eded52cfccbb565cbeb3f2c597d6ff6b0339764967d61e4c70be9284ff2ad1015b479196cbb659c01dfca9458b
SSDEEP

12288:fukBmCK64RSGbBjtWEMm+ngXz9aO4bLlgOKT5LtQcuWrS7yf0F:GkSrjTXGitFcy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
639ce84468b5b67681d9e3341b1446af_JaffaCakes118

Files

639ce84468b5b67681d9e3341b1446af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 579KB - Virtual size: 579KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ