f8a37380b37631c5abd5ce16d84199b8_JaffaCakes118 | Triage

Sharing

General

Target

f8a37380b37631c5abd5ce16d84199b8_JaffaCakes118
Size

448KB
MD5

f8a37380b37631c5abd5ce16d84199b8
SHA1

5a4a83baf21e4f39e2bef5d42248b3f0026418e5
SHA256

1cd4f67d46af13f7fae101a1c5a5b85b413ff7058126c280189b5701739c925a
SHA512

fac366cadb10419d0abdc56da69e4f2f73a0111471190fff165b2330896db30a5947a25eeaf0962e64dade82bb7d1338b346e856df98a10be373473f2999f9b9
SSDEEP

12288:ZiSC/HRfMOwm6QR2Q+4C17gLX7pzF/6nNWIRWTWTiCnDl3wFGx:gEm6aNq17m9zF/6NH7x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8a37380b37631c5abd5ce16d84199b8_JaffaCakes118

Files

f8a37380b37631c5abd5ce16d84199b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 436KB - Virtual size: 434KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ