JaffaCakes118_572b5516b048049e2a3b0027ea4db7ef | Triage

Sharing

General

Target

JaffaCakes118_572b5516b048049e2a3b0027ea4db7ef
Size

956KB
MD5

572b5516b048049e2a3b0027ea4db7ef
SHA1

70fddceb7e2385a334826f374e954520f2209de7
SHA256

2e2cc7ae02c04034acfe6380e82dac009a9bed80969e2a684181ecaf5a9e2a1b
SHA512

9b9df905e9e9c592cc81d421707feede20596f786e92bc8141bdd39619b53239d7375b4b325002d998a943f1f80a581616ef84b13cb27b1975fd391522350759
SSDEEP

24576:G5FMt36c7nSgMit65Eq/318GpGTv/JZl6Ezp:GFcOXit6SmjkF64

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_572b5516b048049e2a3b0027ea4db7ef

Files

JaffaCakes118_572b5516b048049e2a3b0027ea4db7ef
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 944KB - Virtual size: 941KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ