d747f1d49e132eb6616747403592ab27_JaffaCakes118 | Triage

Sharing

General

Target

d747f1d49e132eb6616747403592ab27_JaffaCakes118
Size

282KB
MD5

d747f1d49e132eb6616747403592ab27
SHA1

4d0ab11be2827b300d2bc9b6c8450c098c060fd7
SHA256

60c837e01b02be312c1b1a1135d07fe3ced04e04c5390f7afe7b2f85cb233943
SHA512

2041151d38cd26142616f120f69671c98af03823bfc2d7b45f35e010110c25180a04c14656ef711fc52a668de2865dfb8ab846759fb5f0952a0ca86f137df28e
SSDEEP

6144:QCQfM0GU7vTAqHc0WSuzQbI7KZJUpmkLO8xiyQvs3Ccnt2j75LbGRXOk+lcjkrEi:wKM/KM7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d747f1d49e132eb6616747403592ab27_JaffaCakes118

Files

d747f1d49e132eb6616747403592ab27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ