f646e1b73240400e54f4bf0e2e3bd45b_JaffaCakes118 | Triage

Sharing

General

Target

f646e1b73240400e54f4bf0e2e3bd45b_JaffaCakes118
Size

873KB
MD5

f646e1b73240400e54f4bf0e2e3bd45b
SHA1

606b1c648a58ed21812e8930f7b8b86d072070b9
SHA256

70f4d4934f391aa799209e0cca54f4dbe073355c1a84ffb1743135bc86568820
SHA512

40f8106afd7dbeb6ab632afec3cd778edd837d165ede712e2279e1fc3e33e2207c7dfc363b500447a19e2cd99de32a231d40d919be09a34244187659f50dd5f0
SSDEEP

24576:RK2UHr9Xe28lgP1j4xN6VyNeDJKucfAHLlW:RKp5O28aP1cT60NMcfArlW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f646e1b73240400e54f4bf0e2e3bd45b_JaffaCakes118

Files

f646e1b73240400e54f4bf0e2e3bd45b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 804KB - Virtual size: 803KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ