JaffaCakes118_9cf8b43bd3a4745ffac6ed014f47a398 | Triage

Sharing

General

Target

JaffaCakes118_9cf8b43bd3a4745ffac6ed014f47a398
Size

915KB
MD5

9cf8b43bd3a4745ffac6ed014f47a398
SHA1

c496bfb1531bebff3e8e28cb9ccbda8a33c42288
SHA256

b88d4191fa5c0323acbe3ce49ae0a5d3f5e85382f59a91da08e5f601a57f2ce0
SHA512

083aa5c79a4c5676cc55773eb6cbb586681c6b2ef48ba9e9b9a5593af701a966a4f46fad921b83f0dd4c8eb8c3fdc0180ddd78c3be19d1d0569725173c5cd993
SSDEEP

12288:e1ExgKPSvX7zCxcoirdwHwhjm+2c1a2uVXpfF7QOYZFkDOglzAKp:1G0STGxcacjahDlDp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_9cf8b43bd3a4745ffac6ed014f47a398

Files

JaffaCakes118_9cf8b43bd3a4745ffac6ed014f47a398
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 716KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 198KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ