14b9827234dd8b05c3f0c7ddfdb64260_JaffaCakes118 | Triage

Sharing

General

Target

14b9827234dd8b05c3f0c7ddfdb64260_JaffaCakes118
Size

102KB
MD5

14b9827234dd8b05c3f0c7ddfdb64260
SHA1

415385772e43fecdd5fb6c08511095af73ec8a61
SHA256

8495c1969e74212aa43a9c13f3651708670d7b5748d90c72b2d0829ba1cfce86
SHA512

c39ed347b9cc8e9dfa4ef825f7c696d28170835a26c2fa727dd3921fc237b2b70a27c51dc492d28e280a4ecfc1a668b5dfe47ff9f539ccb7a50a69f8ab06aba7
SSDEEP

1536:VAIyTpIBGzBT9gFazqyr5KsvNhDwmNsaZyk2iv:V4TpFesqSTNsa4K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14b9827234dd8b05c3f0c7ddfdb64260_JaffaCakes118

Files

14b9827234dd8b05c3f0c7ddfdb64260_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ