JaffaCakes118_9f4dd331c63ae453f965930d298ff583 | Triage

Sharing

General

Target

JaffaCakes118_9f4dd331c63ae453f965930d298ff583
Size

508KB
MD5

9f4dd331c63ae453f965930d298ff583
SHA1

d0a0fd5e309ff8f9eefa4de36a7d435d189faa40
SHA256

255ffb1d483912d0fe57c099166690d2e074ae7f3dcc81dd746504a3f553c8c4
SHA512

77e1d8e211b65b7a51364fa8e50c058c54f3b8e1fccfb2a86d7b8ce199ccb78295558273e770a0a954a92bd674a0c0cb3fe83e3a7eefbc16f5f074cf6d50b0d3
SSDEEP

12288:woRUi2iNsatqTaRcRFOTNcecxarUAxvcl9bxv:XUi1V0TrETNch4cR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_9f4dd331c63ae453f965930d298ff583

Files

JaffaCakes118_9f4dd331c63ae453f965930d298ff583
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 500KB - Virtual size: 500KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ