785c608c1b13155ecf6ee9e4e655a217_JaffaCakes118 | Triage

Sharing

General

Target

785c608c1b13155ecf6ee9e4e655a217_JaffaCakes118
Size

489KB
MD5

785c608c1b13155ecf6ee9e4e655a217
SHA1

d31d940ffc0fcca86489ed2bffc61ad7aaf2a712
SHA256

09a0df4265ab25ff561a3cec1dbe6fa3dab812b5fd08ff679de5376ae31daa30
SHA512

fc090be86db39c53c956f41e9e97bbc0336d7ed286cfa3f06ad2d9c5cc3549aa540ed9552a3df5e15f344bf051e95be65f664af1051f85729313b2e313c1bd09
SSDEEP

3072:dHuMOcSChBy3XP6GT50YkcD+0EHQgYgNUeTcOcRU69fH9cEl3:dHicSChoXt3i0EH9Umvufnl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
785c608c1b13155ecf6ee9e4e655a217_JaffaCakes118

Files

785c608c1b13155ecf6ee9e4e655a217_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 424KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ