1635aed29d0d672ccc89efcecae7cef5_JaffaCakes118 | Triage

Sharing

General

Target

1635aed29d0d672ccc89efcecae7cef5_JaffaCakes118
Size

290KB
MD5

1635aed29d0d672ccc89efcecae7cef5
SHA1

3f4674d6c905203e946f68421ca0a1973156f1e0
SHA256

ac188ce986ac43742881764d684437b8c4c37ff8b73b08921bc60cdf9e0bf352
SHA512

8494ff38541bbdad56f9b9c842929864fff1872e06ab2ebb3daae9fd0193b6682175a922a3a52be29a35e2902c83cc6f1388c470b97f6297264450d68bb6023f
SSDEEP

6144:ITVQmqVpK4P1amHKEssg7GEPhS4XV5tKiSu0WqV6r/yWeeZQ:XPpPU7pJ3Fpm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1635aed29d0d672ccc89efcecae7cef5_JaffaCakes118

Files

1635aed29d0d672ccc89efcecae7cef5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ