JaffaCakes118_7898e4e88c9705492077d523a6c6b039 | Triage

Sharing

General

Target

JaffaCakes118_7898e4e88c9705492077d523a6c6b039
Size

842KB
MD5

7898e4e88c9705492077d523a6c6b039
SHA1

5c6a8950eca0afeef0b9015a4ca0985e766bc85d
SHA256

bd142721218705104b92c67aa3fca2517067f778b3ec67faf97eb41cd5c5a4b6
SHA512

a5439f6adb3073e61c3c6a08d912e2f07725769e16f4deea5bbe2f31c61e18611957df947a8653734fddf0ca7f5788947402f04f3c11fdd8664a9e023c8e4e61
SSDEEP

12288:hTsrLn1kFwdd0p+7j9albVmYBvSAa8q8G8CGmP0ooTrSpDo3BwOwUqP:B0nCFgd0pKj9albIYRC2mP0VrsM32pT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_7898e4e88c9705492077d523a6c6b039

Files

JaffaCakes118_7898e4e88c9705492077d523a6c6b039
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Current Crypters\2012\2012 2\2012 2\obj\x86\Release\2012.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 801KB - Virtual size: 800KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ