JaffaCakes118_4b822ff53f5ad740eeaba9e1bb26ad68 | Triage

Sharing

General

Target

JaffaCakes118_4b822ff53f5ad740eeaba9e1bb26ad68
Size

918KB
MD5

4b822ff53f5ad740eeaba9e1bb26ad68
SHA1

d3e4912cce03f627ab8da804fc0151c7815f5eb4
SHA256

2d21d56c6e2bb7643be411747eabf7c9eaf5316a1520e3a84f1363c53075d87c
SHA512

3e4962fe88bac0a4e3d38656b90c5b5229f61b14278c6e9c335118fb1b30a953698187d41ff4624ee93ae39a62268b1c8476e83afc29b9264f430e11e18713d2
SSDEEP

24576:KrRKzyKje6aY8FGjyDUYZluEhckcUkdH:ORKWKje6wQjcU+lrkt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_4b822ff53f5ad740eeaba9e1bb26ad68

Files

JaffaCakes118_4b822ff53f5ad740eeaba9e1bb26ad68
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 728KB - Virtual size: 728KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ