JaffaCakes118_cc13cac99e845ccbff50753d95d10b17 | Triage

Sharing

General

Target

JaffaCakes118_cc13cac99e845ccbff50753d95d10b17
Size

212KB
MD5

cc13cac99e845ccbff50753d95d10b17
SHA1

94382f56cd83accafea65aec26d8b251820075d1
SHA256

8001ed950d4df55d2803dcdeafbc5a71161d497d640d621151e4fa60b9055c00
SHA512

4c997f50e721916fc5ecd39a0016209be0ff33984922c78a87168e8281c1cf0244af0441bd60549bfdc0a070af2b78fd22d82224c3e166e906de9c4bb4e0c209
SSDEEP

3072:9N0hZ0+C4S1Cr4RenEdLdzxj17pDzIpev0l6XQYb3VY0+2vLA3hzUjDdqj4xS/tK:oE+SVa2vsEDdQR/tG0UY16mj7zCz1+8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_cc13cac99e845ccbff50753d95d10b17

Files

JaffaCakes118_cc13cac99e845ccbff50753d95d10b17
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Wind.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ