a25673d120384ef69c9e5837d8d04995_JaffaCakes118 | Triage

Sharing

General

Target

a25673d120384ef69c9e5837d8d04995_JaffaCakes118
Size

398KB
MD5

a25673d120384ef69c9e5837d8d04995
SHA1

8f33b1fdad76d0d75fa9dd47c1cc938662950b81
SHA256

dcd9736647b75c8840d97a840ccd5d7074aaa38f48a640b15c5172378cce3825
SHA512

58b0fd3dbd3167c586ba66d885acefae4394ea7cc2bedd9dbccca76688e75038de00f450c91e62d3fc33afa58cf992b694fb4bda3a9d803afab852c10d5fabaf
SSDEEP

1536:3vZfWsbvJP/LoZ8WIfk3qprPJ1owCU1M9wtLtt/:fVWsjRjg3qpzFo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a25673d120384ef69c9e5837d8d04995_JaffaCakes118

Files

a25673d120384ef69c9e5837d8d04995_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 364KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ