64bfde937b304e541d3a835b09fccd96_JaffaCakes118 | Triage

Sharing

General

Target

64bfde937b304e541d3a835b09fccd96_JaffaCakes118
Size

56KB
MD5

64bfde937b304e541d3a835b09fccd96
SHA1

1da9dd0347577ea549dfe34b6e1ff0f6249d1e7b
SHA256

3c1a14d3447f3e71f0d525a0fd5c3bd133349a8b389203e5c72ce00faf558dfa
SHA512

9c9abb79d085095ac5624467c560202fde112987b91ab08d531192e88d7ef15d32a41b5c5b2c67daf043bc7db67a0900d49bfbe7b9f3444b962333205d955971
SSDEEP

768:TN8I6utFCRoOqB8a7902nO9+VFRyHd6vFqf49:TN8I6utFCRoOq6aWV9+VF2d6vFa6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64bfde937b304e541d3a835b09fccd96_JaffaCakes118

Files

64bfde937b304e541d3a835b09fccd96_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ