d71962c5ba36d09ea4b9f31c1b6937ba_JaffaCakes118 | Triage

Sharing

General

Target

d71962c5ba36d09ea4b9f31c1b6937ba_JaffaCakes118
Size

619KB
MD5

d71962c5ba36d09ea4b9f31c1b6937ba
SHA1

1be95522e6b15507e927f1f6d68ebcdbc7803792
SHA256

b1f6925c271c251a6b8cb7d2bfcdba61cceedd6660b31e4e12e56a5f4ce5a4b0
SHA512

e76ead74b5b03693c71d97aa98eff9cc0649bdcd1c04237399b61b3c08cb0ae8761fe6fe8b49dc8f11d9dd06fbabf586ca97cf732c67f39dea50d6a072586cd0
SSDEEP

12288:GlFQMG0fwkDKdUPoJSnyOkFnp5zXv2tR:oFpG0fw/QoJSyOkn6t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d71962c5ba36d09ea4b9f31c1b6937ba_JaffaCakes118

Files

d71962c5ba36d09ea4b9f31c1b6937ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 616KB - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ