JaffaCakes118_b2d2c9eb4e6fd26e27dce67b3eee33a3 | Triage

Sharing

General

Target

JaffaCakes118_b2d2c9eb4e6fd26e27dce67b3eee33a3
Size

422KB
MD5

b2d2c9eb4e6fd26e27dce67b3eee33a3
SHA1

46d90fe32ebebc64913a427b475aef1c6db60b52
SHA256

0003a467e46e3a34cde07a730c2d12dd923275e808f9841dcb7357a0fa674703
SHA512

0aeb5fc5bf4bcb141bbb3d4b568c768e05499d7ee6d4ba0bdc6f0c6b046b50b2fa0dac6e9b2934d7d7d2ead46128230fb3d479f8431eb33a33ed28d75b969e13
SSDEEP

12288:5shhl6EZ+iEcvpbMC7dZz/uiHzCOK/ZuC:0lb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_b2d2c9eb4e6fd26e27dce67b3eee33a3

Files

JaffaCakes118_b2d2c9eb4e6fd26e27dce67b3eee33a3
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 420KB - Virtual size: 419KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ