JaffaCakes118_7b32b34b1b2bdfd9bb7e0b9b2dcf8b8ad652a941ff20a6e60419e47744506e65

General

Target

JaffaCakes118_7b32b34b1b2bdfd9bb7e0b9b2dcf8b8ad652a941ff20a6e60419e47744506e65
Size

554KB
MD5

850f5a4b7df63f8f266f9fb6bfaa15cb
SHA1

550437581ed0c54f5a4e351dd20f8ca475562c60
SHA256

7b32b34b1b2bdfd9bb7e0b9b2dcf8b8ad652a941ff20a6e60419e47744506e65
SHA512

91e4e03a3a9c006ed584c12f0f1dc7b8f24c872517bbef2ccf0f280eb39cd5292526b33f28f6f23e225b19730ade85aada9633e1ee89324f40ae93409e34f7c8
SSDEEP

12288:fRDffxlDEmFrL76T6nmGfZ+SxPNeTF9TYNpPW7GO6EGSd/3tz:pbPAmV7I6mGBNWnT0ShGSltz

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5c2681ca119f8cc0c779cd305088751e4e584600c60da1b0f4b740396d7cd5b2

JaffaCakes118_7b32b34b1b2bdfd9bb7e0b9b2dcf8b8ad652a941ff20a6e60419e47744506e65
.zip

Password: infected
5c2681ca119f8cc0c779cd305088751e4e584600c60da1b0f4b740396d7cd5b2
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 540KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ