a86d840fa47a7a2a464ab59dfe98b202_JaffaCakes118 | Triage

Sharing

General

Target

a86d840fa47a7a2a464ab59dfe98b202_JaffaCakes118
Size

84KB
MD5

a86d840fa47a7a2a464ab59dfe98b202
SHA1

1d3f1e4c7de65b812baeb22a4efbd1e9c6b8dadd
SHA256

07fe14f484cd152c032a3df3ba0cc91143e60720a345bcc51e548aec82f593a4
SHA512

345803a5faee6a6115e43d070833ab0f36b706368d4373221f2dc3ab1d25b64e9bcafd0c42d4fce8d0199941dc9e6af899be35100e09d73c3393a91cd0eeb33b
SSDEEP

1536:Z8Xy1mzpWHosdib4tctCBhl3KUj+Ud1+FbxRahHBmdYHm6i:SXywV0VtcwBf3KUeFbDEBmuHmp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a86d840fa47a7a2a464ab59dfe98b202_JaffaCakes118

Files

a86d840fa47a7a2a464ab59dfe98b202_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ