4d0accd12d11cd8de4798bd2d2715fb5_JaffaCakes118 | Triage

Sharing

General

Target

4d0accd12d11cd8de4798bd2d2715fb5_JaffaCakes118
Size

32KB
MD5

4d0accd12d11cd8de4798bd2d2715fb5
SHA1

57124be21843204b9f708959dc101fccf2b51f1e
SHA256

3b064d303f048ec12ad6ec654de4a9f1320e04d9c97df12e580738486b82aab5
SHA512

19132853918ca8e40a54789a4885b96acc35d10ae51c5072bfa0b8eca42ba50483a1102c9a93c5a14704e85b6a9a2a74b415da8a20f47cc5a6fa513b31017b07
SSDEEP

384:ELq6O30Ob0QwsIQt/7q5w01VRucQnc6GhPKOULTTRwK:Sq13npIaNe0c6gK5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
4d0accd12d11cd8de4798bd2d2715fb5_JaffaCakes118

Files

4d0accd12d11cd8de4798bd2d2715fb5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ