81cbb06cb316028f50c745f57dcd0d4f_JaffaCakes118 | Triage

Sharing

General

Target

81cbb06cb316028f50c745f57dcd0d4f_JaffaCakes118
Size

155KB
MD5

81cbb06cb316028f50c745f57dcd0d4f
SHA1

3c9792e5c56f56d0cb47fe2ece4b128b4c8b332c
SHA256

c75446ca3442631cec9724ed37a089b77864b4b6e6d1f424ab650834fc2150f3
SHA512

295d8318c3eb8bd730b0c041e38dee73e04d1dea683ca81a2dc3123940e80cd44ab14fa06b52531a9e1dba60865dd16cbd68adafa6be6535353328b88e693ba2
SSDEEP

3072:EgYu3EcVaILaTEDzgMQIEUOSVB3+LcbNSmkpe4J+zSs:j9z2InOSj+uEmU+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81cbb06cb316028f50c745f57dcd0d4f_JaffaCakes118

Files

81cbb06cb316028f50c745f57dcd0d4f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ