b3e71b5e973a42dc9f297f79377165b7_JaffaCakes118 | Triage

Sharing

General

Target

b3e71b5e973a42dc9f297f79377165b7_JaffaCakes118
Size

804KB
MD5

b3e71b5e973a42dc9f297f79377165b7
SHA1

a084d94b800a490f40852a42141fa8d56a7cb668
SHA256

dd8accb35c4d3064543686f1f697b9e5eb4195fbefecef6f53e032ef2bd4395e
SHA512

a115f1d1dd61ed78e60d519eea0558daf1ed37a05b5166915c5a317feec2c51eb0de8c0d1eefe19bae4e3090314090a3e28003a317aa503a640ed9e7db5cd6be
SSDEEP

24576:MAYpW5I/8hFPJxKLxyEjI/2F69xgyd86:bFPJM0qDFmgyK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3e71b5e973a42dc9f297f79377165b7_JaffaCakes118

Files

b3e71b5e973a42dc9f297f79377165b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 613KB - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ