JaffaCakes118_438e520a35b3e761964c311e36d11e84 | Triage

Sharing

General

Target

JaffaCakes118_438e520a35b3e761964c311e36d11e84
Size

424KB
MD5

438e520a35b3e761964c311e36d11e84
SHA1

526ca3b65b0f2908f2ab010c3d62faf0ff48bcc2
SHA256

575103f054e7618fa6bade84f9064602acceb29f69c9cdf3e98c3a73fb74fe10
SHA512

ee34e887236edd49af69b2e9d7cf4a76f584a049a5522d6a24408ffc5192e90be3fdcd027aa879cd70bf46b385cb51dcc4cfe4ed9708a9ea71e9630a18132ad5
SSDEEP

6144:1K66e51X2OZxjwtY/mk0GaSXX4VVGLouEQqNxfM5Zo+oZK3tCW4iodpi/46u:dHj7/m5GaS4XGCxl2dCDhU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_438e520a35b3e761964c311e36d11e84

Files

JaffaCakes118_438e520a35b3e761964c311e36d11e84
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 422KB - Virtual size: 421KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ