d561757e0af77697ac7c78cce04880a0_JaffaCakes118 | Triage

Sharing

General

Target

d561757e0af77697ac7c78cce04880a0_JaffaCakes118
Size

582KB
MD5

d561757e0af77697ac7c78cce04880a0
SHA1

d2f8788e1f4f95bf866914a7efbb284bba3f850d
SHA256

1613bfb500607dd257e4fd9f329e10d9383804e45c055061eac7c54819cf93e0
SHA512

74a7b11f188b8b0cfa518eaa7315424b64e4d5e5be8ee8deaa821e1dcd46fe0b2e3a51e12de8911e46a1cfe590302f68615e734ca8288f6516d701bf30825e80
SSDEEP

6144:HktFGcCmUocjJCYx+lo63fPzVdgIJXEt5YE3j6Dbnc82gKa:HkicEocdCYxoo63fvgTH3uDDf2n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d561757e0af77697ac7c78cce04880a0_JaffaCakes118

Files

d561757e0af77697ac7c78cce04880a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 297KB - Virtual size: 297KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ