f1ffad491acb5315b62d5b83dc202658_JaffaCakes118 | Triage

Sharing

General

Target

f1ffad491acb5315b62d5b83dc202658_JaffaCakes118
Size

404KB
MD5

f1ffad491acb5315b62d5b83dc202658
SHA1

d4fe707e9d1b3cd8096423d9da14f616fdef98fe
SHA256

387b2f380f5f3b6949c22fdb06932b9f5e6d25b5afd4ecf21be7034fbaa9109d
SHA512

c93adf475a123c4715b21b709906c4c410569d747dbb0e9a6fa69550a78d2196dbea23390a80c5accc3f3f2503187593738b7f6e273f66fa392da3f501bd88bb
SSDEEP

12288:sa5dUeRrl7IJDTm54cJG7gFGjboco64LCTI2IO6X4S:TPRrlEU54cQ7C0bocgCEm6X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1ffad491acb5315b62d5b83dc202658_JaffaCakes118

Files

f1ffad491acb5315b62d5b83dc202658_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 308KB - Virtual size: 305KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ