d3df4d4d285e8fb0b56035fcf1bc8b85_JaffaCakes118 | Triage

Sharing

General

Target

d3df4d4d285e8fb0b56035fcf1bc8b85_JaffaCakes118
Size

516KB
MD5

d3df4d4d285e8fb0b56035fcf1bc8b85
SHA1

5877112a3943bb9d83ba5df6be81e39426f25627
SHA256

7a2ba1c2346a862592d13cd33310c446e446710fe5d49593ff7702c42fb835f4
SHA512

28a34c2e8d2f7fccb65f8c190692e04764ef9bdc81a4b4a00baf5bdf2cc8d92a9b895eb5a75721d087f2a20246aef328ee05ace8a52c6d4ec2ed28fe2bdd4026
SSDEEP

12288:otf/wblJ5v7XPGRR8ggsusmrtS1HVl5Xci/r9QmHAS9uW3LJ:omR37XgWsKtURMerWELJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3df4d4d285e8fb0b56035fcf1bc8b85_JaffaCakes118

Files

d3df4d4d285e8fb0b56035fcf1bc8b85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 504KB - Virtual size: 503KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ