da3b8b8b369687b0140f1ff2abc6b7b3_JaffaCakes118 | Triage

Sharing

General

Target

da3b8b8b369687b0140f1ff2abc6b7b3_JaffaCakes118
Size

4.2MB
MD5

da3b8b8b369687b0140f1ff2abc6b7b3
SHA1

bf6dd0f03e80fe4fbfc8e4222ae4acbee35b68bb
SHA256

313c959b7868e8a29f3402f4dc87905635f2fd0701441db7d9900d31ccd47d50
SHA512

5a54fbf239738105af7306a9c66d513c327c2450e6bea6c6fb115b2fb1224015edf40a196a992abee17ee1edd01ab06df1a69010c4420336b45d67975acada2a
SSDEEP

98304:czWWHWqTQdizfbeuoHtNSvGo9fGyc3/lsrH4ser9:cb2qRz65Mx9fGZ2Gr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da3b8b8b369687b0140f1ff2abc6b7b3_JaffaCakes118

Files

da3b8b8b369687b0140f1ff2abc6b7b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ