8017e41b2c71f66ee834d21728a4160b_JaffaCakes118 | Triage

Sharing

General

Target

8017e41b2c71f66ee834d21728a4160b_JaffaCakes118
Size

1002KB
MD5

8017e41b2c71f66ee834d21728a4160b
SHA1

cb8019c2aa21d17daf49f1a9a23e13281b8f4ac8
SHA256

d83290b80bf412884168a6d24a06fad12edb578cc612ea555476b422a4499613
SHA512

08ed4d7ef49248bca16a6ceff5ee2ae5acdb0f3b91b8fd6ffbf8bdcf2f90c5000e6fced84eb82dd9e94d5b358d27552526ce6a0d3896168251f4c7b88789ca03
SSDEEP

24576:J7oP3LsrNZqTcIPBz8xAOZmuaWdEIwjS/1aOaxys:loTYqAIPBz8xASvaWt4Q1c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8017e41b2c71f66ee834d21728a4160b_JaffaCakes118

Files

8017e41b2c71f66ee834d21728a4160b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1000KB - Virtual size: 999KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ