d13bb43ed0d785b7026cbfd743123568_JaffaCakes118 | Triage

Sharing

General

Target

d13bb43ed0d785b7026cbfd743123568_JaffaCakes118
Size

826KB
MD5

d13bb43ed0d785b7026cbfd743123568
SHA1

77921fd7d2a82f9d42a44fee2df3dfd7e1c459f6
SHA256

4accc75edd57e5a6e939f1c122ad24949c1305ce70d9796fd57b8d3028f4a8da
SHA512

1b1015aed280490ef537297bc093ede2dc32c3f1a66edd713835c047bde10c810d3e75b59f196104d9ac88cb6a1a6b971caa17e91189bb8fe56f46bc10003837
SSDEEP

12288:Zu5JfleohV9oasH4EIKGZeBAuUyf1aAjBHwYDxt1YHsH:Zu5Jt5o3H4EIKyDmf1a6wYDjKs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d13bb43ed0d785b7026cbfd743123568_JaffaCakes118

Files

d13bb43ed0d785b7026cbfd743123568_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 643KB - Virtual size: 643KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ