d83c756ecce399c30f15a014d02d2851_JaffaCakes118 | Triage

Sharing

General

Target

d83c756ecce399c30f15a014d02d2851_JaffaCakes118
Size

120KB
MD5

d83c756ecce399c30f15a014d02d2851
SHA1

398025442f70518f8be639173d90ebdf1e6cecd7
SHA256

eb544d2c62155cea869be4694b8e63b62021042898b89e4a2cd63d9b2c9d5181
SHA512

f0e5d50d41e532688280b1d83bb2fea7fa32ea9895e0b3e65741d0553b11e95256db0293e9bb5090abeea2a25e61af303cd0345deb999ab78b8f8fa689895ee9
SSDEEP

3072:56Z/RVs8BgEpmZAYNqfbcYmbRUX41uiD:5c/7fbfdxi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d83c756ecce399c30f15a014d02d2851_JaffaCakes118

Files

d83c756ecce399c30f15a014d02d2851_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ