c67942995f9f76a2fe57c85f27435aa0_JaffaCakes118 | Triage

Sharing

General

Target

c67942995f9f76a2fe57c85f27435aa0_JaffaCakes118
Size

856KB
MD5

c67942995f9f76a2fe57c85f27435aa0
SHA1

7c447663a9e841f47cba60e29164accedd82e4e8
SHA256

44af2a0a5fe2bbc9da82eb8836213ef51297cbf439ac9afd244f9513539b2f53
SHA512

8071049978a65e0ff2eb1375a0e445ba9a4656814a670574b795171829c0d2e5d7543f9480275032d2e8d55eab4fdeb1fe604f5f0c50930532b7b4166251e2ce
SSDEEP

12288:hWYaoA3uSHK7zFLpIa7/rXwBWfIt4zREuN/UMhWBge//Worn0k/O5z1f:M9uRRNVbrXwR4zRb6hBO5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c67942995f9f76a2fe57c85f27435aa0_JaffaCakes118

Files

c67942995f9f76a2fe57c85f27435aa0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 854KB - Virtual size: 853KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ