f2c9685f78d6905e0c9644e8668e3664_JaffaCakes118 | Triage

Sharing

General

Target

f2c9685f78d6905e0c9644e8668e3664_JaffaCakes118
Size

896KB
MD5

f2c9685f78d6905e0c9644e8668e3664
SHA1

82c6b3dc28ba5c858b6caa3898094c5952540795
SHA256

6d6f9fa7620cf0056d02556ff97c31ce6e6915683c9f12177fc6b506a2dc19c9
SHA512

922107924eb0f84f9f07829bfe593e307fb71dc35265b2db25a75e6c7fc88c855e827c84ff20125e04c945c895d10733e6e657e5d60c49597fb1839546e2205e
SSDEEP

6144:9KZAoVdw7mzHD9ckgcJdAMBGW60H1obeF9tigMCt:9dw5HRckP0I7lVobAigN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2c9685f78d6905e0c9644e8668e3664_JaffaCakes118

Files

f2c9685f78d6905e0c9644e8668e3664_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 224KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ