171ff2e20f79aa3737f1d59e232508f9_JaffaCakes118 | Triage

Sharing

General

Target

171ff2e20f79aa3737f1d59e232508f9_JaffaCakes118
Size

10.7MB
MD5

171ff2e20f79aa3737f1d59e232508f9
SHA1

edb479ab87c4c47cc32ee5fc107cf9501fc1ae0b
SHA256

f1d86efd7551171b8ebfcd44b239bd769a5f17cbac6373bc72788212a0928c07
SHA512

d8b535e139190e2a3db7924b1094a38d7f843c6ad74bfe2b6ff076d2e4879abb0a5178c434b492635e05d7fd1ffe2ddd7c7c42d14dcf4c732fa0b77f09f0efd7
SSDEEP

196608:HXGiZj9UnUu31F7Vd1M8nIeSXz75cPHOiLw3KHrl7OZ:Hh9UnUu318X7uPcGp2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
171ff2e20f79aa3737f1d59e232508f9_JaffaCakes118

Files

171ff2e20f79aa3737f1d59e232508f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10.7MB - Virtual size: 10.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ