207645f63810cee7e11916c7e0a67b36_JaffaCakes118 | Triage

Sharing

General

Target

207645f63810cee7e11916c7e0a67b36_JaffaCakes118
Size

815KB
MD5

207645f63810cee7e11916c7e0a67b36
SHA1

75df97feffc4ef507f9adc09a0ebb334d5639083
SHA256

690f29000238ee3c6064f73e7ecb923128c2e305067fcccc0f444012ca8b6c13
SHA512

ac5276776e40c8c2c40829a3e561d5bea5ae8ee248b7cbc88e1fcfdda2e79675703ecff08efa64f95e11a14a3a1203f76fa7273d540ecc9e80e93d278666e1d6
SSDEEP

12288:cyxC/JMM5dcaBuzCPHK7zLIqUnAQFo9YdcXUxmnsL0XXYA2w4fEDkrwwSdw95:cyYBMGcd54qjOoYEU4ns2IAOMFz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
207645f63810cee7e11916c7e0a67b36_JaffaCakes118

Files

207645f63810cee7e11916c7e0a67b36_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 812KB - Virtual size: 812KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ