JaffaCakes118_437b6c36c64a603dbb3a6d968e8c626cb41a0bb70fb5570ae1aa3f4d3788a7e5

General

Target

JaffaCakes118_437b6c36c64a603dbb3a6d968e8c626cb41a0bb70fb5570ae1aa3f4d3788a7e5
Size

725KB
MD5

c8c73d49bbd11f3e116f55405362f7e9
SHA1

6bc5c3a41ac3dc14d1622d084913b290f32b1577
SHA256

437b6c36c64a603dbb3a6d968e8c626cb41a0bb70fb5570ae1aa3f4d3788a7e5
SHA512

96a03934cfa5721e63ee9f55930d41ddfb21c53f7f9b7908be30ce5bda03bcc89ca5d0e05bd28d1d729f4d166f8b15c11ed76bf81e1f0bfe10a6374b79c33185
SSDEEP

12288:XX4D2gYpx/TlzZs+nbCzoRCX+mIQi8kafIi2SE+hh8NT80Op9MNAJ5cX13mVW:H4D2gYX9RCX+mIQXfIpdyh8NTVO3Myrs

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ed9fdc716cfd7cc640ec2658883268b5d297c33d316333d2141b8b7265917f9a

JaffaCakes118_437b6c36c64a603dbb3a6d968e8c626cb41a0bb70fb5570ae1aa3f4d3788a7e5
.zip

Password: infected
ed9fdc716cfd7cc640ec2658883268b5d297c33d316333d2141b8b7265917f9a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 811KB - Virtual size: 811KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ