436a83ecdc1f7576899f95cc64422cbc_JaffaCakes118 | Triage

Sharing

General

Target

436a83ecdc1f7576899f95cc64422cbc_JaffaCakes118
Size

396KB
MD5

436a83ecdc1f7576899f95cc64422cbc
SHA1

43a66145e092d690dce2d8c346985ecab46dfcff
SHA256

8c29681d35a2c573b1b215a68b28ff5aa18f92155aaf3eebf40f4878e943bf18
SHA512

61863576fa2a4d841d96b3f1f89530ef97f9f11dcc7635bf7226e1218a8fbdad1e7cccb418adec8a990cebafee0ee8730099a3f8435e25f2c2621ee22475a927
SSDEEP

12288:WufWGd0FuwdpQybEZIQmiWCm8BXq7qtw/oNgs2:iA0Fuwd0lA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
436a83ecdc1f7576899f95cc64422cbc_JaffaCakes118

Files

436a83ecdc1f7576899f95cc64422cbc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 384KB - Virtual size: 383KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ