a9593711f9d287cafed0e8319a98c597_JaffaCakes118 | Triage

Sharing

General

Target

a9593711f9d287cafed0e8319a98c597_JaffaCakes118
Size

216KB
MD5

a9593711f9d287cafed0e8319a98c597
SHA1

f1cb647b89166831e56ad46a1ee9bca54edbb253
SHA256

bc7613374a7e21343c50d3c69adef38e909484bbe800672866c9b187d761d204
SHA512

7d4ac7ffe583dce6a7d06edaa582e5c99cec4612e1256bfaf7321cbd7eff38a055ac541bcc1627cf5108a6b287ed5b928402d78d2f6b52ca25bfe0f2629d577a
SSDEEP

3072:x2HDiwUGkqrnrLRrQ3Sz7EJY495GfM9vyPN/d/6D+xI0r:oLxPRrQz5t96d/e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9593711f9d287cafed0e8319a98c597_JaffaCakes118

Files

a9593711f9d287cafed0e8319a98c597_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ