c879e956ccbd3ba97e79ca91fd29aa48_JaffaCakes118 | Triage

Sharing

General

Target

c879e956ccbd3ba97e79ca91fd29aa48_JaffaCakes118
Size

155KB
MD5

c879e956ccbd3ba97e79ca91fd29aa48
SHA1

7858ee3850ced0768fcff1a74ce84845a3e1a029
SHA256

12b6d0e67c15b08cae6c514cc8e2c781c142d9a365587630fc6b168403de9843
SHA512

4f594d9acf7c819da4f9aa09f6916c33e6d1e06b1d6ea75a668a376d680feefc0fc21b7b51b7ae9ec6501f6d77bc97a481a991b27bda97c195515e425665ab2b
SSDEEP

1536:J8ZpeWV+HllVRgC0+T7CmVqKi+mHfE8fr+:SZjV+HT/b0+3s+Ys8K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c879e956ccbd3ba97e79ca91fd29aa48_JaffaCakes118

Files

c879e956ccbd3ba97e79ca91fd29aa48_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ