af74d4094f1084cd0458941c1f812890_JaffaCakes118 | Triage

Sharing

General

Target

af74d4094f1084cd0458941c1f812890_JaffaCakes118
Size

128KB
MD5

af74d4094f1084cd0458941c1f812890
SHA1

cada28007246b7f21a64fe0c26f2737dc5108fd9
SHA256

257b6efc63e0896d00638a9f08ecb4b7f7c3a8424c9eda16053ca9ff3656d968
SHA512

1c14756a119617fe00784609306402129f191da6f94e196b6d8e0886eee38d39e6b450c7ad2d12be2ca214d471b1579b3d69a844ff2670d84251038ead3924ea
SSDEEP

3072:ptMWoHmGJ5mQ4DFy3mE5iJleCJMrLiGAMN:bMWq54kWE5iJlmrLQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af74d4094f1084cd0458941c1f812890_JaffaCakes118

Files

af74d4094f1084cd0458941c1f812890_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ