648cb8c726d6ac5047e24f4c3aad44c2_JaffaCakes118 | Triage

Sharing

General

Target

648cb8c726d6ac5047e24f4c3aad44c2_JaffaCakes118
Size

356KB
MD5

648cb8c726d6ac5047e24f4c3aad44c2
SHA1

7bb03b62a9855254b5ba8e77d237af0e174735e5
SHA256

687e17197517592369bb2783d4dc90f1a9177be7adc7fc901b68c1e07130a998
SHA512

67f07eccf2bf7c3e6f7c26f52643f7f6183ec922ce10f96acf5d4cb068a8b3684ad29900ab5a3971e6d8afb07e72ed6a37adf54fa1b78bac9f67294582b86ba9
SSDEEP

6144:pOU8+8HEGVr8Kd/sHsXlIeN7t01hMY17QTxLxpZKEouNpGq:R8+8XDFOsSU7t0tlQ1Lxrou6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
648cb8c726d6ac5047e24f4c3aad44c2_JaffaCakes118

Files

648cb8c726d6ac5047e24f4c3aad44c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 312KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ