c42ddbce16aea96c0bb88d9e87c980a2_JaffaCakes118 | Triage

Sharing

General

Target

c42ddbce16aea96c0bb88d9e87c980a2_JaffaCakes118
Size

620KB
MD5

c42ddbce16aea96c0bb88d9e87c980a2
SHA1

526145c89f037374a2bcc1cfd7c8c5432e325409
SHA256

92e79e9d1b1706ac5e31616473a4ee97c23f9adc8e2e6b8a28698e1194277e59
SHA512

24cc40fee52425430b98ccbf35fafe861c4547a84d5955229339fa17e856164b857f1095a8667739884020c4289cc7de3ef7cae7821055393ed3cdb97f7b2b4d
SSDEEP

12288:b1+XIo9JSfYOgY8Kljo34ojth+qQ6lmQKFN65l1PaZr4a6M2yOK:gS8ONqh+qQ6lkN6r1yZr4NM2yt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c42ddbce16aea96c0bb88d9e87c980a2_JaffaCakes118

Files

c42ddbce16aea96c0bb88d9e87c980a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 545KB - Virtual size: 544KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ