ba46fe758af56f3b802a48257400ae3b_JaffaCakes118 | Triage

Sharing

General

Target

ba46fe758af56f3b802a48257400ae3b_JaffaCakes118
Size

681KB
MD5

ba46fe758af56f3b802a48257400ae3b
SHA1

23feb167e861cb76347c67d8203ecf88ead0100e
SHA256

9deea273844a59993c433e30d5bed48c2da32dfc63280b8b7ed4b0ce6f2968e8
SHA512

8ca358cd43aa75d51cc3c23f6be1adc1294283db59a8b5bcee25896fc29a8e1624f662967e8a26a87c5932f27a521a181ceda74022d643a65a0b3c51e0ec4330
SSDEEP

12288:jGv+NEHnC5D31a7pZN+dQAfuKonKyM2MvDnGVZu0+O:tNEHuD3YpiKAWKonUZvDGLu0n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba46fe758af56f3b802a48257400ae3b_JaffaCakes118

Files

ba46fe758af56f3b802a48257400ae3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 520KB - Virtual size: 519KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ