JaffaCakes118_5a7b86547708e144d51e61fa0eefbf17 | Triage

Sharing

General

Target

JaffaCakes118_5a7b86547708e144d51e61fa0eefbf17
Size

908KB
MD5

5a7b86547708e144d51e61fa0eefbf17
SHA1

bd6abf0259e5027a750355979e9f32dbf3d03873
SHA256

ce8c12c91a0dfb0033212cb60790a8e4e037d4cbb96a0a47253e2c648bacc278
SHA512

63180698105bcbfeaafb3056014a411a7bf848648af35631cb39f69149cc941225eee87fff63c275089fc4b58d8e718492c7ce49d9f96c88a5e935adfa769113
SSDEEP

12288:QqjqRBa80gi+TCUQpd6KA26mY6nltHnhm9FXRT:QwqN0gi+TCUQvHEFXZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_5a7b86547708e144d51e61fa0eefbf17

Files

JaffaCakes118_5a7b86547708e144d51e61fa0eefbf17
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 439KB - Virtual size: 439KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 424KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ