JaffaCakes118_eedbbe2b45d3dea47ddb5b56848edf35f0439ec68bf2767ea985d28b4834db0a

General

Target

JaffaCakes118_eedbbe2b45d3dea47ddb5b56848edf35f0439ec68bf2767ea985d28b4834db0a
Size

541KB
MD5

12479e8c7411b92984a6571d16d6bbc4
SHA1

ce1fdfbaeeb4ebd41d19575753721c672405ecc6
SHA256

eedbbe2b45d3dea47ddb5b56848edf35f0439ec68bf2767ea985d28b4834db0a
SHA512

32b135f0c77b0d8495ff6b3ef7f9144548cb691a09380c0c822492f2c421ae22c6a00c65052d6bf09c6784dfe8c5ca8354accec3bcc29f46b578645d1070d02a
SSDEEP

12288:o1Tx3zp+a+ORpdoxSVJPupYUADERDWgxd/A6+PM/jH/DcaS5lYlCLS+a:o1BzpT+Ozds4JU1NEo46v/78PYTv

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8649b814fa724e40e4dae7cc2d9d727da957b760e7d28d3af04a7c1011311a00

JaffaCakes118_eedbbe2b45d3dea47ddb5b56848edf35f0439ec68bf2767ea985d28b4834db0a
.zip

Password: infected
8649b814fa724e40e4dae7cc2d9d727da957b760e7d28d3af04a7c1011311a00
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 597KB - Virtual size: 596KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ