d15452b3e3c4767edb137cd6c7e63536_JaffaCakes118 | Triage

Sharing

General

Target

d15452b3e3c4767edb137cd6c7e63536_JaffaCakes118
Size

284KB
MD5

d15452b3e3c4767edb137cd6c7e63536
SHA1

779d956cc3ea7e8148d4fc081e6b8c37a9fa0489
SHA256

07f40d1a480d7a4bf81c743779de97d67dea24600a56b105efe71dc1f5d25d67
SHA512

fc7d314e58d9d4ea033f8b87ca4313c81a984aea735b566afef11804facf3f0fa5afbcec9bbda1646838431497368dbe958ff156aaa6e072178547814a744ac4
SSDEEP

3072:S69mm23Wv+TBLdIRzt9Y69mm23Wv+TBLdIR:YmYW2ddIsmYW2ddI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d15452b3e3c4767edb137cd6c7e63536_JaffaCakes118

Files

d15452b3e3c4767edb137cd6c7e63536_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ