b97d78a479702b6b58844faa8d28295f_JaffaCakes118 | Triage

Sharing

General

Target

b97d78a479702b6b58844faa8d28295f_JaffaCakes118
Size

892KB
MD5

b97d78a479702b6b58844faa8d28295f
SHA1

fbc801ab9624bf5f5a10202ba7e314d9feac1e9f
SHA256

20c15d51ea9d78617850d3f1485959154f3c1ac1210d0b9636ba316161454dfe
SHA512

3b317fd845cac6a7bbac1c947f9fb8ff1ca7a4468f0feb4b5c4cc1d427e72b4f0e6c4fe5cdff2b0f84da07b5d1d5ed035b6e9d1b13d24fe3412534a8448d3e43
SSDEEP

24576:h7+fg1MueybJV7SHPtstw+aJJT1E9vQ3D6n/gD2:Bbt7ACwNFCoIo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b97d78a479702b6b58844faa8d28295f_JaffaCakes118

Files

b97d78a479702b6b58844faa8d28295f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 880KB - Virtual size: 878KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ