42d14493d70781dbb667f48ed49b3883_JaffaCakes118 | Triage

Sharing

General

Target

42d14493d70781dbb667f48ed49b3883_JaffaCakes118
Size

1.5MB
MD5

42d14493d70781dbb667f48ed49b3883
SHA1

2a636e319dc2c246b45cacff8391d7fcf071281f
SHA256

013ae675443decd1083ec918ee62b59dfc8b3e17e41f96f4be21c3260a2f372b
SHA512

1bf6eba2199570437e877f7f8708434d1b7aec9300d1e24105e5af8f4a9b3faf079931a72fd20bbead7706bf7cdf65464d5db87b61fe561724f42a07044e64f8
SSDEEP

24576:swVbBEwUQK6Q+phT6OUK7vtZmih+MZZS5R0:BbBEp9+qOYM3B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42d14493d70781dbb667f48ed49b3883_JaffaCakes118

Files

42d14493d70781dbb667f48ed49b3883_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ