JaffaCakes118_0d4ef58d237b879d965b285743a0b519 | Triage

Sharing

General

Target

JaffaCakes118_0d4ef58d237b879d965b285743a0b519
Size

469KB
MD5

0d4ef58d237b879d965b285743a0b519
SHA1

c963e99d837e5fe803bb228354df45e65e41d098
SHA256

9227b2726d815b560136af8e556138d4292896946a731cadaad99e356517fc74
SHA512

3c9b2f109cd1bb8fa7b6073a9886c029141759f7511f8f73185f16ecee94c1a646d1a01612007d169df047b199cedb329e08841910b99dd2bc1481f21008bb62
SSDEEP

12288:S4HmzpE3lKWpn7GVhE7jtCftd4EavZEJqT/5iJytcqKbDIlNvJkxy77:S+tEWkE7Ul+hyhb4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_0d4ef58d237b879d965b285743a0b519

Files

JaffaCakes118_0d4ef58d237b879d965b285743a0b519
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 467KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ