JaffaCakes118_60100f98d7ccafbbe110e377ae3e17c2 | Triage

Sharing

General

Target

JaffaCakes118_60100f98d7ccafbbe110e377ae3e17c2
Size

630KB
MD5

60100f98d7ccafbbe110e377ae3e17c2
SHA1

6aa77517f474e945f81db1df8b45bea5e8917593
SHA256

ee344829b2ce25fc5bc242f1bb747cd201f4c7e9ef10d1e98c556110419197ab
SHA512

2e78bbdecf8911c832bce5e50d34da4c3b0f26616e98f49d60b2373b9849eca0ae1722be36f672e930ff79b5764fe4acbb1e03c9dce8cbfd242f87dbe387a06e
SSDEEP

12288:HkqhQKetZiE5xkfEikfxxluSNuEuJIz15p5uvZcy8jJ4xzVq/:hLeSQbfvuEcIt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_60100f98d7ccafbbe110e377ae3e17c2

Files

JaffaCakes118_60100f98d7ccafbbe110e377ae3e17c2
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 628KB - Virtual size: 627KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ