JaffaCakes118_0faf8611f58a966b80b1581d7ccfe8ee | Triage

Sharing

General

Target

JaffaCakes118_0faf8611f58a966b80b1581d7ccfe8ee
Size

764KB
MD5

0faf8611f58a966b80b1581d7ccfe8ee
SHA1

762622bc95629c602ec40aacca9a48a8c4ee30af
SHA256

299297178101260513b2cf0670507000c4976b7806e299509c699cc74fe76366
SHA512

6d33cc340fee3439611335cb4e3b3932279602db9cfaab587a30151aa38813af764ab163590c268e7855c1da8a0713467d504fc4c5f6a52b7394dbf696dd24f6
SSDEEP

12288:xz1sjklChOmVv7Xx/eUUaCQTFhJgSbGSLaGvUkguLW36m0T/RDuwBLqoiP:z0tJ3b5Qd6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_0faf8611f58a966b80b1581d7ccfe8ee

Files

JaffaCakes118_0faf8611f58a966b80b1581d7ccfe8ee
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 752KB - Virtual size: 749KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ