bd9edcc0579c302dc9fb9989d32bdbbc_JaffaCakes118 | Triage

Sharing

General

Target

bd9edcc0579c302dc9fb9989d32bdbbc_JaffaCakes118
Size

13.6MB
MD5

bd9edcc0579c302dc9fb9989d32bdbbc
SHA1

c260ff5a05cac4e8f9da5610665ac7157304b860
SHA256

aedcf3fbf86a541786a511b44fc21facd3882f457876d1bc52ee82e2411d1643
SHA512

ec49ce02455636339c8669d193047bb79e533a8c7337299aeec1a47d0c9049d587a764d315a963285d72c621fb11ab7c7eaae7ada673eed04b3f94a9826fba62
SSDEEP

1536:ouFtmwvPkXVFGkAAPSLoeb+uP4OTry+DsMZaHZKGsX:o8t/3klF1Ab+aa+D7Qw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd9edcc0579c302dc9fb9989d32bdbbc_JaffaCakes118

Files

bd9edcc0579c302dc9fb9989d32bdbbc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13.5MB - Virtual size: 13.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ