JaffaCakes118_ed7b254924385e6453e8c83e6a52799c | Triage

Sharing

General

Target

JaffaCakes118_ed7b254924385e6453e8c83e6a52799c
Size

532KB
MD5

ed7b254924385e6453e8c83e6a52799c
SHA1

d64da66e23c1aa5b4fce3b9d586b881eb630aa31
SHA256

edd8af7480af2c4022d4a2ec41adf9bb3f5b3cdfaede486eade658239550d193
SHA512

9f9f258b4a57c1abe4c1a8f726de5edbbf4de10edce1e00c0b58d15de8712450a6da18520d124203fa8a42dc0bf2ec723460c56ee5b18afd666a5011d13de467
SSDEEP

12288:fCiN9vp/FpHRdjWouP02XXV8Q0x9NkGBjOftD0gQWGMt:fC2/dBjWo8iQ0DzBKtD02

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_ed7b254924385e6453e8c83e6a52799c

Files

JaffaCakes118_ed7b254924385e6453e8c83e6a52799c
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 530KB - Virtual size: 530KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ