316675ee932f3deec4d3eaa36347db03_JaffaCakes118 | Triage

Sharing

General

Target

316675ee932f3deec4d3eaa36347db03_JaffaCakes118
Size

870KB
MD5

316675ee932f3deec4d3eaa36347db03
SHA1

c8db9092049f42be776ca2255caaeafccbe022d1
SHA256

6a164f48d3ed08f48e0817b3e5fe2aa579a2c57e7c7c5ab49a38d7cbd3715ade
SHA512

ad62920a54508995e04cd97de87186d73e5c9a1af559a0257e43d9973b62c6d1c39a17813e196e625748f25a9ec30ad649446592060e81e5699d7182d3f896f3
SSDEEP

24576:dMPqoKAWf98bx4lXxQScb5+EC6c2u8di69Z:dMCoKAWf9VxQbVHi8l9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
316675ee932f3deec4d3eaa36347db03_JaffaCakes118

Files

316675ee932f3deec4d3eaa36347db03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 865KB - Virtual size: 865KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ