ad6a2462d28cc5a630da6f6d6647c09a_JaffaCakes118 | Triage

Sharing

General

Target

ad6a2462d28cc5a630da6f6d6647c09a_JaffaCakes118
Size

480KB
MD5

ad6a2462d28cc5a630da6f6d6647c09a
SHA1

e77626c466b1b0d26a1943b2813e677c02ad662e
SHA256

bae8d87fed95956bf203b41e11e067daefbd4739d7782129e5ec87462e726c4f
SHA512

8263b4adc2d530e7d982ccffb732de753c5a705e578b6b4899be920732ea48f0289d799ffc26d5aaa1775d4155739d81563a82c866ba1312adff87ef1f468c99
SSDEEP

12288:ViSC/HRxEzUjyfTEfrC1LZRelcl3wFIak:FAyferC1LTXz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad6a2462d28cc5a630da6f6d6647c09a_JaffaCakes118

Files

ad6a2462d28cc5a630da6f6d6647c09a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 432KB - Virtual size: 430KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ