c0d760b7f07f74a1b37a8724581e7dbd_JaffaCakes118 | Triage

Sharing

General

Target

c0d760b7f07f74a1b37a8724581e7dbd_JaffaCakes118
Size

934KB
MD5

c0d760b7f07f74a1b37a8724581e7dbd
SHA1

2ba0c0311451646bb478beb97f36d42e65478270
SHA256

41ccbc679c2941a561c736334dd245fdfd0dffef9656a55eede15676a60f55cc
SHA512

5c9311ad10acd2bfafe7a665d3d02bd536d6f982286ed281507c2b502e5aab5580b9a73ff8d60b68b0a10f07e0608536f88c4484e83a3a3b22155ff53bc89d1d
SSDEEP

12288:0M8L5hjv2zv1gIHNlt21k0w8fv479+Z3bK653H94Cw94Hdr6Zye7+1HbltjAyCji:IhK2iE1k0rXYcZ3r3OCwW7v0PR6aSiPg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
c0d760b7f07f74a1b37a8724581e7dbd_JaffaCakes118

Files

c0d760b7f07f74a1b37a8724581e7dbd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 931KB - Virtual size: 931KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ