9fbdc223fd2933fac5a9bb801f59c6b1_JaffaCakes118 | Triage

Sharing

General

Target

9fbdc223fd2933fac5a9bb801f59c6b1_JaffaCakes118
Size

108KB
MD5

9fbdc223fd2933fac5a9bb801f59c6b1
SHA1

fca37e0fa1a54f97d6c02609a49acc291b454cc6
SHA256

28bc76580c4dccb7ec8fbfe82e6a0f094627556217650dcfcf80a7291a0fceaa
SHA512

dd356c7047fdc1862c8cdae109c4ea234021f9be2520c41075571400e74e38a3775a4afbda7b14f08e608129ecca77325e6ee59b20e67271ed04c9441ca10013
SSDEEP

3072:pUX+caOwfR3qvW3ouQ/JLfIrjpvQ7qSMf8MfZG:pUX+cy3qvJuoLgKiEM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
9fbdc223fd2933fac5a9bb801f59c6b1_JaffaCakes118

Files

9fbdc223fd2933fac5a9bb801f59c6b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ