7f016dfa5e22a08510e0ec5f5358bb67_JaffaCakes118 | Triage

Sharing

General

Target

7f016dfa5e22a08510e0ec5f5358bb67_JaffaCakes118
Size

323KB
MD5

7f016dfa5e22a08510e0ec5f5358bb67
SHA1

d8d74e0421e5d43e7d4b7e91f3ed4f66881ee77e
SHA256

8988632c1f151363dcf5508756084830f38659c4f12117e18dc273786b5d0fb1
SHA512

586ec026bd7e9744652cbb921eda9002b5a840ed615c907e46b8f46ca3b9fc1ca6bbd96afec47b61eab8b089ce6cb0dcde41bebda364786539ea13bada7e3678
SSDEEP

6144:mvMt6V/hdmkcyvAIFtUx2yTF5vdzfaiWKBilS70e8mZC9TbUcuJJCoED:8MtehrcyvAI8MyT3lfjyS70e84QEO1D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/8ee60423bc1f9d704f96b7806b39819a.exe

Files

7f016dfa5e22a08510e0ec5f5358bb67_JaffaCakes118
.tar
8ee60423bc1f9d704f96b7806b39819a.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ