JaffaCakes118_217158e753ea637b00cf6261dbd12ee7 | Triage

Sharing

General

Target

JaffaCakes118_217158e753ea637b00cf6261dbd12ee7
Size

544KB
MD5

217158e753ea637b00cf6261dbd12ee7
SHA1

dec65cef7b36f9fe93cec79c19045076f1283c28
SHA256

585cb28b1341cfe997a0e01fc4c8b2734a4a64462423c33d280bf46481d84129
SHA512

3dd1c089ed494f6849d162dd85a6679e37f4d7417cc044735c6947705d79f4aeff44ecf20f2d10e1c63ae8f994f223cdb5a6ec178d245ec5f0f6b503575b804d
SSDEEP

12288:OXx1mwPwB41nYhOmCa33dtP95ywAPI56n3gB6Xd:OXx1LaWYtCandVbyANAXd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_217158e753ea637b00cf6261dbd12ee7

Files

JaffaCakes118_217158e753ea637b00cf6261dbd12ee7
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 444KB - Virtual size: 443KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ