af4f00409b3a2223e14874db6568bbed_JaffaCakes118 | Triage

Sharing

General

Target

af4f00409b3a2223e14874db6568bbed_JaffaCakes118
Size

1.5MB
MD5

af4f00409b3a2223e14874db6568bbed
SHA1

de5339354e14a9a4559c98315f5727fb23edfd30
SHA256

fd1811b11af257706b725b9f4689ea8244e948ae5d83ea78869d19a50ebc7b86
SHA512

b93e44dbf3a1d44dc4961d107bb0fa1293f31f7f8d18e16d250556ca38f2125a940a9d21ca57cb083357b8ba2c8aabc631b656470ed204cd8d3f89ee3ba025bd
SSDEEP

24576:XfNvR/bgGlgKSaZX9/nlLS1rJwY+t7OZZS5R0:XFvR/bgGlgcv/nNSZJwppO3B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
af4f00409b3a2223e14874db6568bbed_JaffaCakes118

Files

af4f00409b3a2223e14874db6568bbed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ