99e445a3b3a4c17256431acf01d34f2b_JaffaCakes118 | Triage

Sharing

General

Target

99e445a3b3a4c17256431acf01d34f2b_JaffaCakes118
Size

876KB
MD5

99e445a3b3a4c17256431acf01d34f2b
SHA1

129d2f8bb8f3a36e994fc99db6d24cb3b539834e
SHA256

933e73089907d9a6031dc117d40c29ead10553c135e050feda1e08a16dd49fab
SHA512

bcc908db17214e9e8979edc3c60e4283f6507d1f61a04b27c0642d6f75e8ba7b2acd0b5afee883fc92c87249d6908fa298ee1720090d05f604f7d3d856807449
SSDEEP

24576:Rd0jNhkIOUnBfeQtee2XgEi3GPYbYXd8Sa:/0jNh62I1+CfXd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99e445a3b3a4c17256431acf01d34f2b_JaffaCakes118

Files

99e445a3b3a4c17256431acf01d34f2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 761KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ