JaffaCakes118_ba5416439d1a8a9ec5c5377d125edb4e | Triage

Sharing

General

Target

JaffaCakes118_ba5416439d1a8a9ec5c5377d125edb4e
Size

296KB
MD5

ba5416439d1a8a9ec5c5377d125edb4e
SHA1

488efa82acbb1ecd7335efa761d935689ca4af44
SHA256

e60ee4c9ec66cb96aabffce7ba7867a97cf6cd9e48e011cacbefcc6a7875f389
SHA512

ea3b66350f24137a5a6fb6b0f80cb29087b6b5c6ba773302406188ee9a7ad0fffa82a28a62e7ea626646df238aec5940cecbbbc46feb3fd4e40be77e0df28562
SSDEEP

6144:Q50fpxAfEAy3RLRo5jwBsL5qTm2ZCD+KgCY:dpfAal6cTvZzd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_ba5416439d1a8a9ec5c5377d125edb4e

Files

JaffaCakes118_ba5416439d1a8a9ec5c5377d125edb4e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ