JaffaCakes118_d482c2e9df68e260b1050ea8ee8fa76b | Triage

Sharing

General

Target

JaffaCakes118_d482c2e9df68e260b1050ea8ee8fa76b
Size

456KB
MD5

d482c2e9df68e260b1050ea8ee8fa76b
SHA1

bb35c7bb9338fbf095f3bacbca07c095ba3dc5a9
SHA256

7633cc9d15770c447bf07213c010f0411e28a88905251fbed2e7ba9a4a2c7a04
SHA512

da38edf37cb07e3dad680ca640d302e54f74fd51abbd2907eec0787069487453a8ff577c4602712d11c4ea073c225a2106f98574fae39577af721933834eda35
SSDEEP

12288:l7qzjVTwOtSoSw/fMrWjf2uYSrhESbdl3wF:lSjVTwTOMgPggd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_d482c2e9df68e260b1050ea8ee8fa76b

Files

JaffaCakes118_d482c2e9df68e260b1050ea8ee8fa76b
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 436KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ