420446c4c0abc470bf506a4f9b113a9b_JaffaCakes118 | Triage

Sharing

General

Target

420446c4c0abc470bf506a4f9b113a9b_JaffaCakes118
Size

56KB
MD5

420446c4c0abc470bf506a4f9b113a9b
SHA1

0eaaee91af46d35e4d5d321cc1f7d8d46179f628
SHA256

7670596b5a411a67a81b1c601e44adcfac5778af96dfdec8d8d91eb7b7c1c843
SHA512

b6e902928d5289117734311f79c8473e4a93cefd9c14b3b2124e675fb59829668db0abd3d71ce9b2962df42f54bc0235b82ad6e09b62075437928d18ef544fe3
SSDEEP

1536:wXGk2wqVBz40Bz44ltTR4FTdfNNpNt3N+Fmt:I2wqVBk0BkUtT+VdVfd+4t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
420446c4c0abc470bf506a4f9b113a9b_JaffaCakes118

Files

420446c4c0abc470bf506a4f9b113a9b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ