JaffaCakes118_1597ffd4b1262d1d25f34f0de7aed129 | Triage

Sharing

General

Target

JaffaCakes118_1597ffd4b1262d1d25f34f0de7aed129
Size

598KB
MD5

1597ffd4b1262d1d25f34f0de7aed129
SHA1

936fcc97ca39f39aaa05635b95da5a7698785546
SHA256

f659031b488c5c105016d60cfc9da09ea0a68f43b957e8b264461e75bcbf6f4b
SHA512

29b611766ee35dbf286a71462d845f54897b21c583e24eeb4cbcf5bc387f2468d0ebdb1712f6fc54b3a122d2a1fec122f7c9af7faeda31e6e0625cdff77d9dad
SSDEEP

12288:FSfa9ALNWgoeJWD8YX+l9q2xyjiXsCIHJrOiv3QfYXge8ERosA:FSCCVWoQ+kZCaTuYX3u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1597ffd4b1262d1d25f34f0de7aed129

Files

JaffaCakes118_1597ffd4b1262d1d25f34f0de7aed129
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 563KB - Virtual size: 563KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ