JaffaCakes118_5036d1196afd6ce96a520403619373e9 | Triage

Sharing

General

Target

JaffaCakes118_5036d1196afd6ce96a520403619373e9
Size

500KB
MD5

5036d1196afd6ce96a520403619373e9
SHA1

cbb3e9abb0471e38b04a46b0eb19f06dcddcdb93
SHA256

af4d00bb8c001a7b221373b52d8f994251d13e087fa5238b9f849031a607f8e0
SHA512

d95ddf48f25a5f5b7ad356b26f02205361326660c58e9861c4a46765ac736ae6eef228da339863a8a97cc27508fc231386e15be551bbbb11b7bd1c8a74b2e7e9
SSDEEP

6144:rYDTW6Sqmbmh4uyau1daddf9Cbb25NI3YpLiyF9x1N5uQh:rYDThSqmKhvprlSG7C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_5036d1196afd6ce96a520403619373e9

Files

JaffaCakes118_5036d1196afd6ce96a520403619373e9
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 488KB - Virtual size: 486KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ