c685f5a3a129a15d8a25ebdbd0f00994_JaffaCakes118 | Triage

Sharing

General

Target

c685f5a3a129a15d8a25ebdbd0f00994_JaffaCakes118
Size

277KB
MD5

c685f5a3a129a15d8a25ebdbd0f00994
SHA1

893006c834666d8bd3f9d2099db5b9e6d700603e
SHA256

6881dcb378aba30c8938ecc12b44fd7907672acce6e80c8f82175418986baeea
SHA512

e0887581d5b01d30d6c8681bbd9fd08d3af57c13a644138e35519701fc535955a285b017ccefe8f6747d94e374b5781ce4d26d35c4c107cd9df17499fe80a043
SSDEEP

6144:bUBmAYzN4lWkm7DW46tAnXR4zAv9RsAQ0b3mEr2G0xY6uJPK:A6zN40P6tAnXRz9c0b30G0xYBPK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/mkuvCQs6UPJDajm.exe

Files

c685f5a3a129a15d8a25ebdbd0f00994_JaffaCakes118
.ace
out.ace
.ace
mkuvCQs6UPJDajm.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 353KB - Virtual size: 353KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ