b1f7864d12ccf6cf4aa393cc6a9cbe52_JaffaCakes118 | Triage

Sharing

General

Target

b1f7864d12ccf6cf4aa393cc6a9cbe52_JaffaCakes118
Size

327KB
MD5

b1f7864d12ccf6cf4aa393cc6a9cbe52
SHA1

3d6f59f1a074b32eb190e9f345986b683771e50d
SHA256

1218ac83fb1bb4c49de83dbeda959adde2e5608bfbbc97702b69a29d6d123537
SHA512

84b07b6445114ef9bbe2393b3ea75b73d45ffa3491e8790640929a6809773e4791bb2953150f083ff78c86fa78d318db6b8d07e7804ebc9f16fe96d0852ef4e3
SSDEEP

6144:YVc/0BjPcb6GZ+Iu710mhvrfkQQ4hMen8XasR+Mnu2j7:QBa+IZMUTen8XaOpu2n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1f7864d12ccf6cf4aa393cc6a9cbe52_JaffaCakes118

Files

b1f7864d12ccf6cf4aa393cc6a9cbe52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ