9c5343686d7cb3c3ff90baf39f649233_JaffaCakes118 | Triage

Sharing

General

Target

9c5343686d7cb3c3ff90baf39f649233_JaffaCakes118
Size

377KB
MD5

9c5343686d7cb3c3ff90baf39f649233
SHA1

c93f07bc0cd6c352ba03853e2849d8db60851061
SHA256

39ef35eb445f2c31d2a7d28b682bfd068c77c064ccfe5b321234444e202f40b6
SHA512

da05db6e99ef14e35b81b7c91fe287e26fc3b0f89d411c7cd0767514b8b205a7675b8a4268a286bce66d83c2001b17e7be37681ad85721bd60f05dea86aaa8ba
SSDEEP

6144:4hUfR1Gd/SEmQ27hrTsMzjdbbrXwoQlx:4hsR1Gd/SEr27tTsMzjdbbrXwoQ7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c5343686d7cb3c3ff90baf39f649233_JaffaCakes118

Files

9c5343686d7cb3c3ff90baf39f649233_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 374KB - Virtual size: 373KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ