9426dc9b8f72f909b3942db6eb186f5d_JaffaCakes118 | Triage

Sharing

General

Target

9426dc9b8f72f909b3942db6eb186f5d_JaffaCakes118
Size

894KB
MD5

9426dc9b8f72f909b3942db6eb186f5d
SHA1

7c95adf813aca090d9df767830885e1af8fb5d7e
SHA256

7c071823d86f7f37eb038add1e274db23c722612d74602e11496d0b4e312103a
SHA512

169b0f951c40c696d7e696ddf473d8a019765e40eabb90b3c6183c4e761d8fdaddf1ec18e4f84a50a9396da53c298958ead92e8fc4135cdb07f45ce87d3d362c
SSDEEP

12288:4se2d4V/0GzmvnITzhgb7ef8M+w8z/FCnkEFKvFxO6zHK7zQWzKboZT0FR:/HSd6Y87w8DFCkPvFxO6+U0KboyR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9426dc9b8f72f909b3942db6eb186f5d_JaffaCakes118

Files

9426dc9b8f72f909b3942db6eb186f5d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 687KB - Virtual size: 686KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ