88d96ea706d79048f446ff14abbde5d7_JaffaCakes118 | Triage

Sharing

General

Target

88d96ea706d79048f446ff14abbde5d7_JaffaCakes118
Size

1024KB
MD5

88d96ea706d79048f446ff14abbde5d7
SHA1

8e8d7d3cb9ce7620d3d11e9a363afc26221ecb02
SHA256

48b86ad57a5031867fa3b4a1b224d7ceca8d05edc53a6d51e82f12b2b6a67d52
SHA512

af1537bc4246bb3c5db00e9a0a9834505202b76d6b8af85e81d87114bad512caca5f66f5f24a0b846ade0572ee4af5b92b8482e631d2b2bae3e236481fb45f76
SSDEEP

1536:SI7UuV7YXsixucgwfBuWWWGr7OQvOs+a5HvjkcEJuHv:V7Uuu4pWz8jTxWuP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88d96ea706d79048f446ff14abbde5d7_JaffaCakes118

Files

88d96ea706d79048f446ff14abbde5d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ