f884c48291efc94056ebd12a6c452bca_JaffaCakes118 | Triage

Sharing

General

Target

f884c48291efc94056ebd12a6c452bca_JaffaCakes118
Size

457KB
MD5

f884c48291efc94056ebd12a6c452bca
SHA1

6a14e335110ee2df1811467533d03bee4f16b30c
SHA256

b6303200103a2850024a8fa44653b37d9eae9d3b5586c85e37fa2396f76e5b45
SHA512

b3683b54bf9b0d9722c961b3e154a537cc9e971cac71ffa21efdc1e5a53cfb6dca0f5e374ac03ee23f659cab0ce20e70333d12d937ed1a72f0ab046d9beb28bc
SSDEEP

12288:vxd8PIcO+kOmZ2xd8PIcO+kOmZ6PzWDuS0s4aJ1Txm7g:/Mk+kbUMk+kbQiiFaTA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f884c48291efc94056ebd12a6c452bca_JaffaCakes118

Files

f884c48291efc94056ebd12a6c452bca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 455KB - Virtual size: 454KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ