8c645b5871d27ab92bea81e0c5349010_JaffaCakes118 | Triage

Sharing

General

Target

8c645b5871d27ab92bea81e0c5349010_JaffaCakes118
Size

86KB
MD5

8c645b5871d27ab92bea81e0c5349010
SHA1

b77459aa2e0e735a3cf95b41cb32d3c57a502ef6
SHA256

48c78e8d63f05f5e7a891cc12d495ba16a501cacdefc0b5d163909753197ea91
SHA512

87204a4e7a6f50f86d2aca9a8dff2c4fb3186ce94fc936f182357d0508b20226cdb442f3e3d445da1f55b610383d24fdcb50adb8271864dbc80f18cc2bb70c12
SSDEEP

1536:Gvm7hGHxj1XTJKF591DQBHh0WvxaqUfEH8MIc0cuB:NKxjx0L9VyXxPUcPIc4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c645b5871d27ab92bea81e0c5349010_JaffaCakes118

Files

8c645b5871d27ab92bea81e0c5349010_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ