f3becd80be8779dfeb8ca5791f7ffb86_JaffaCakes118 | Triage

Sharing

General

Target

f3becd80be8779dfeb8ca5791f7ffb86_JaffaCakes118
Size

414KB
MD5

f3becd80be8779dfeb8ca5791f7ffb86
SHA1

91f03335ff735cef93edafc6748d354d08eabe87
SHA256

44a8227ccd3bd1fb5285b84d99282b199594457c73bdab74c4cbeb331e671618
SHA512

f508be9b45170e7669c69ab6ec4849ddb318ee8d9a0d3ffc906197747de67b94d4c32b8aecb383fee6ce49d7e364a07743c8e3a7ed6e91132219633d65661abb
SSDEEP

12288:5D+5/QYSTtPaFx06kmDfAbqt2gqZhXmpgZPa:AX8abxkml9D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3becd80be8779dfeb8ca5791f7ffb86_JaffaCakes118

Files

f3becd80be8779dfeb8ca5791f7ffb86_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 411KB - Virtual size: 411KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ