8aa075a9221e50b4d6fdd468163ad9cd_JaffaCakes118 | Triage

Sharing

General

Target

8aa075a9221e50b4d6fdd468163ad9cd_JaffaCakes118
Size

269KB
MD5

8aa075a9221e50b4d6fdd468163ad9cd
SHA1

a3057e1bcdae8288c8ba0beeed3b1356e04bfe29
SHA256

e171364169d2fa384e3502107de3f65014322c166fc5898bf4ad5dc2bcc28ba4
SHA512

225b93799493ae0342b55a86c5ba48afc5b1b7c2a49f48df6593e852161e5a7827fb82f2f2014dd51706ed9b2202d95bb37b2f0a09481b9dd47ff1022d7a66e2
SSDEEP

6144:MLEvvaZu2TU4XtJEiZuQKpVvkj3bMUyKDIqo934GhoAN:pOdXtiiZuRVcjQUN0qo9346oi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8aa075a9221e50b4d6fdd468163ad9cd_JaffaCakes118

Files

8aa075a9221e50b4d6fdd468163ad9cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ