990cdcf567b0dc24659a342f270f1fa6_JaffaCakes118 | Triage

Sharing

General

Target

990cdcf567b0dc24659a342f270f1fa6_JaffaCakes118
Size

687KB
MD5

990cdcf567b0dc24659a342f270f1fa6
SHA1

852234c77b8cb64420dea90187ff4297265baec1
SHA256

9eb54f2dbdb12b29af357d745ce033ffac85530449663b3b56fb8eedd6ec6cb5
SHA512

9a68f3dac1c004377d41dd3b737d890142eab4a9b38dcd1c2c3a1bc31ccce9b27b4f53ad3e8cc31eed473e4a2b9b8720e77573cc839bc85ca83aff186ab60980
SSDEEP

12288:tKVaEHXeSxUflzrZpvnSg5TORpc8UjlyZkagldPKNr:IZXevvnSgc3eyZu8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
990cdcf567b0dc24659a342f270f1fa6_JaffaCakes118

Files

990cdcf567b0dc24659a342f270f1fa6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 681KB - Virtual size: 681KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ