0874e9314287bead42831de42f491e79_JaffaCakes118 | Triage

Sharing

General

Target

0874e9314287bead42831de42f491e79_JaffaCakes118
Size

534KB
MD5

0874e9314287bead42831de42f491e79
SHA1

2015d5ed50a5fa266338cfcdfcf14003e29caff6
SHA256

7496aa45727b1e0fe4094b9397f5b0365ac64424cc03bd5c82e35489d5c2da33
SHA512

e1255e38d7f511a28e27ed8bbf46ea5c22640963ea106bb1e91747f6ac76a36e06d3c2499b54eb74789e1ae3cd3260acf0bca5e673240d2e80d2b2c5ff071e8f
SSDEEP

12288:26lt/9TaMFyIspMSOtRNzWchOBP9B6k8zuSV9MM7:7wySSd4B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0874e9314287bead42831de42f491e79_JaffaCakes118

Files

0874e9314287bead42831de42f491e79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 516KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ