d64b3c67fa50977d385f5f78b1bc832e_JaffaCakes118 | Triage

Sharing

General

Target

d64b3c67fa50977d385f5f78b1bc832e_JaffaCakes118
Size

9KB
MD5

d64b3c67fa50977d385f5f78b1bc832e
SHA1

f4a6f461d44831d789a16ac564e22b49ebe04632
SHA256

9206cd56614e0609ab586dd64e547e7cd58d3e3e3516731d0b323dae56dea01d
SHA512

b039ae52a60244b7de163bc386ca412e9bf299e8b149dfb6c7df2420a77285d68acee07d7176c5229e7b86c3aeaa96036515d8454cfc8b2dcc41930b3e48a5c8
SSDEEP

192:dBksuj9MuISLeMZZ3r93Vnjdwqz183UEMXC:ilvLeMNFnhwqSsX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d64b3c67fa50977d385f5f78b1bc832e_JaffaCakes118

Files

d64b3c67fa50977d385f5f78b1bc832e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ