66b852a9c91b240e80f7e59bab108298_JaffaCakes118 | Triage

Sharing

General

Target

66b852a9c91b240e80f7e59bab108298_JaffaCakes118
Size

247KB
MD5

66b852a9c91b240e80f7e59bab108298
SHA1

9accc7f379bf198237835fa7d58c299cee47f7cf
SHA256

cf7e2983b8fef5a9588080285389d57a5f6b738ca2f00639a8edebf2ee473835
SHA512

3e3b5623518101d49b41118cdcba2d694e8d73ff683adaf763372b1a4b29e9848ab5da1b5c1ec804bde61f195a1cca4e76c435a334619d88b56776b671f243c8
SSDEEP

3072:Y7tfvw/idrxY5reRd1sSPwD/lPALbIiuS:tiJxgeRd1sSPQiu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
66b852a9c91b240e80f7e59bab108298_JaffaCakes118

Files

66b852a9c91b240e80f7e59bab108298_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ