JaffaCakes118_41934ae0b0f90eaa001db6030bb16f5a | Triage

Sharing

General

Target

JaffaCakes118_41934ae0b0f90eaa001db6030bb16f5a
Size

389KB
MD5

41934ae0b0f90eaa001db6030bb16f5a
SHA1

04ae55423bafba63088928e570901e7d2fd42207
SHA256

325f2c7043445dcf6e2c5380fb19d0c8501f44a7628e692866b1339673103c5d
SHA512

1a5d0802e73aca34328d27e7f635eec611e1b57d70675fa5ff8c71f133d926d05a4410d01d9dfbc7c9da72d3237921a821602a1aafc4c9823688765d59d95071
SSDEEP

12288:k/Qw8vG1iFPuliYBkptgTJLbY/rebTe9pvT:1tvG1rLlKe0T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_41934ae0b0f90eaa001db6030bb16f5a

Files

JaffaCakes118_41934ae0b0f90eaa001db6030bb16f5a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 387KB - Virtual size: 386KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ