b29f9d48e5b46064ca394254cb2cd2db_JaffaCakes118 | Triage

Sharing

General

Target

b29f9d48e5b46064ca394254cb2cd2db_JaffaCakes118
Size

899KB
MD5

b29f9d48e5b46064ca394254cb2cd2db
SHA1

d5b09d160fef67bb4819679d707d01e87f828cb9
SHA256

f4eeedec032fad90297cfbdbd09d7d9f4a57fd26d1499827a5f01a4a9791eb20
SHA512

6e4944f30f034d6f58111bd1a2da27c8e8bb00eef524007f27de86cec2ce7dc26dc093651c6f462929f2e47c15c4632a68f8e0ed156ffa32a0d0ef95870e0b3a
SSDEEP

24576:i76u29oxWg4H9RapGGWX/A4SDsvw5f3ksXbXgU:iyGxt4H9HtZQf3JXsU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b29f9d48e5b46064ca394254cb2cd2db_JaffaCakes118

Files

b29f9d48e5b46064ca394254cb2cd2db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 897KB - Virtual size: 896KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ