f95dd237f78cd4f00d9cad631772244c_JaffaCakes118 | Triage

Sharing

General

Target

f95dd237f78cd4f00d9cad631772244c_JaffaCakes118
Size

640KB
MD5

f95dd237f78cd4f00d9cad631772244c
SHA1

bc2da08a075f9c9b2d2b81dabd2af8d2eda181b7
SHA256

8b2c21c13d38bbf20fd65e3a6b840315e14d60c0dc7e131104a5ea8b73699953
SHA512

339273d3e4af7a83eb7a52b9aa8a43c7aafc5ab6f7d9632b102af2030b669e888b672233d4da543150974fe1e1afd89aa2863da20f8b9fa4bee872a85b5979f0
SSDEEP

12288:CkhGT/f7DSvWN1JuigLYVlaf+dhKeVnVBAzzARX4g1z1MpTlu:CvzHSvi7AYaf+dk+gzGXj1zKtlu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f95dd237f78cd4f00d9cad631772244c_JaffaCakes118

Files

f95dd237f78cd4f00d9cad631772244c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 637KB - Virtual size: 637KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ