f4daf646ac7e1f6a6d40ffde86628692_JaffaCakes118 | Triage

Sharing

General

Target

f4daf646ac7e1f6a6d40ffde86628692_JaffaCakes118
Size

2.7MB
MD5

f4daf646ac7e1f6a6d40ffde86628692
SHA1

73ff7f12be4df0251257239a5887f50bd7699ac1
SHA256

91891332b5396dfa08d0407186576249764914562d1864854425068670ccb04c
SHA512

1c4e5f92a9b9f9d690a8a8735ddff752d8eee0fce8a9bed67acfb12e72f5dcdcca5a0156a409f0accc260ee2d955785baf061dbc88e2655e0d8a484d31591de9
SSDEEP

49152:W8/zKid8KH6qf0jySG4FZGCasY6DwOBfrnvV7UeWtdC6tsJ:W8/pOyaFFYiwOBpIeW6SsJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4daf646ac7e1f6a6d40ffde86628692_JaffaCakes118

Files

f4daf646ac7e1f6a6d40ffde86628692_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 140KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ