JaffaCakes118_397f77e9fa4a64173bdb4e97b2eca2f2 | Triage

Sharing

General

Target

JaffaCakes118_397f77e9fa4a64173bdb4e97b2eca2f2
Size

674KB
MD5

397f77e9fa4a64173bdb4e97b2eca2f2
SHA1

9e1f131229b2c427f14c4480ae4963ac089e03d5
SHA256

4850acfdb42686e44bef0aaaffa11dbffe1d59db4a84def2e12a309ab09561c5
SHA512

664bf4425ca4e24b48b6a369daf7af613cd94ce98382b580540022796a03c15f6fd0a6803a4c09f670f0c115a64692e42defd8e467bb048530dfad771a1e4a31
SSDEEP

12288:FTPFpljp+Z+RSWz/WEFpADBtPdyYtEfXDspbRWbcVDEM14ag:FTPFTpaepwQYKObJCag

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_397f77e9fa4a64173bdb4e97b2eca2f2

Files

JaffaCakes118_397f77e9fa4a64173bdb4e97b2eca2f2
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 672KB - Virtual size: 671KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ