d271ecbfca9ac11db371d327b3097ee8_JaffaCakes118 | Triage

Sharing

General

Target

d271ecbfca9ac11db371d327b3097ee8_JaffaCakes118
Size

248KB
MD5

d271ecbfca9ac11db371d327b3097ee8
SHA1

b6e0f2a1b9959f780fb3d2b6da2129120208d812
SHA256

b505f4b09cffc4f0b67fedf26314051eecc524c857b311cc2ad74be77244c996
SHA512

58957e5b3f993a99f8f625731c0c9e6864907a49a946836edf79af67e82e1160f84e8f48a0dfdc803fd0cb9471f1672b29b9f319829b91e3b6353fa5d8bf127b
SSDEEP

6144:v4yZXY+8OgkdrQ1owQ7tTgdkTbX1Gck7vG9a:v4yC+8OgAQ1owQ7SebXcckLv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d271ecbfca9ac11db371d327b3097ee8_JaffaCakes118

Files

d271ecbfca9ac11db371d327b3097ee8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 236KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ