JaffaCakes118_441d9b3c1ef8005b874698b24bf9d96b | Triage

Sharing

General

Target

JaffaCakes118_441d9b3c1ef8005b874698b24bf9d96b
Size

292KB
MD5

441d9b3c1ef8005b874698b24bf9d96b
SHA1

3cbb1636624ca4aec26cb5c69bef671e45f59d92
SHA256

e32ecbde657fe941e2b07464a070bb0bca7516c32754e73f425ea1e7ab589594
SHA512

17d60a44cb5d80e3c54b16efc8a3d8916c9b32911d5b7e5df83d376489d59246e267245d549b73a6e069ba711c01186a4c482ed7af74a5dbc2e01969a44cc0b6
SSDEEP

6144:9IguUIyFAEEBZPwffW99vyKcM9rTsRs/4j+Sb:TuGmAW9hPrTB/4y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_441d9b3c1ef8005b874698b24bf9d96b

Files

JaffaCakes118_441d9b3c1ef8005b874698b24bf9d96b
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ