f7ad3b59548788a59172b6477a1b83f0_JaffaCakes118 | Triage

Sharing

General

Target

f7ad3b59548788a59172b6477a1b83f0_JaffaCakes118
Size

571KB
MD5

f7ad3b59548788a59172b6477a1b83f0
SHA1

3b042b49ac135f38824de3665a051a7631e98782
SHA256

f22a0b5b12687ae12b9f4d625d82a16562bce5e1b03b7d7372df3813e5afc8e5
SHA512

039ea0297abbf3200d145790f0fccc0e4ae8ddb6e2eb75021781c4c131494398602d4f80f65d4878c419e0c35a0368acc17d626affec868ac04c69687d2db341
SSDEEP

12288:ECGb2I5hQeMda6UYZoqNh+8LzxdYlBxg/pngR7:tGbVxMWqVNtvxdYPxgg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7ad3b59548788a59172b6477a1b83f0_JaffaCakes118

Files

f7ad3b59548788a59172b6477a1b83f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 569KB - Virtual size: 569KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ