JaffaCakes118_4708d66f6f8496ecf88dd0ac1680dacd | Triage

Sharing

General

Target

JaffaCakes118_4708d66f6f8496ecf88dd0ac1680dacd
Size

480KB
MD5

4708d66f6f8496ecf88dd0ac1680dacd
SHA1

6bdab58ba50f6e9f3466a69417734d36acd2e8b6
SHA256

3916529a43553809ac434ad23682c47670d3c70911149264005f0c5d602fe3e3
SHA512

c767c117a109a20eda830a729b5183c47caaa95e8e76ec4918b7fd24cba230e0b35718c03c158ce666c3d2b475d8482251e772b8ed8325a2f99b8e365b34df8d
SSDEEP

12288:hy1lFipP5dFl9DhwZ0PRfwzp35HGPHb6kyQwTRHbVDU:hy1lc3TlnwkOaHhE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_4708d66f6f8496ecf88dd0ac1680dacd

Files

JaffaCakes118_4708d66f6f8496ecf88dd0ac1680dacd
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 458KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ