9f1d6f0550a63e829f004374e2db5ada_JaffaCakes118 | Triage

Sharing

General

Target

9f1d6f0550a63e829f004374e2db5ada_JaffaCakes118
Size

544KB
MD5

9f1d6f0550a63e829f004374e2db5ada
SHA1

dd15afcc11d598b33e73ff4172694ce8991237a3
SHA256

c33636c2f7e32e88e2d52a30fb6de3b5139d4c13e420e09a1a5b2ae469854e77
SHA512

a9df8b5a3c8751574486bc4dae1d3f6935c061ecbb6c78b6eb38b072f4c8c6b6dc03d91b003b49fa14c4771ef39df34bd7d933a9730d746011ea3760689a9cc0
SSDEEP

12288:RgBDCvxGbhO6ixrO2t9rO1tIekcZenIu:SCpGvuOE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9f1d6f0550a63e829f004374e2db5ada_JaffaCakes118

Files

9f1d6f0550a63e829f004374e2db5ada_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 527KB - Virtual size: 526KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ