JaffaCakes118_52674d77aa447fa73b70046a3e167983 | Triage

Sharing

General

Target

JaffaCakes118_52674d77aa447fa73b70046a3e167983
Size

532KB
MD5

52674d77aa447fa73b70046a3e167983
SHA1

7c6524d261a89df25c41716333a511db6a439c69
SHA256

aa2167714b7d8b47ee961fcdf4f983dcaddf82d9686b876a7f3cb428024a05e4
SHA512

ba1bf9d01b0c910091b1c3475c6a04305fa8e64e450b66737fa790e265841bc3793dbb455faf6af6e1896da17595604c0ef31dc703762596b63d94b8b742ed2f
SSDEEP

12288:a4TwPgjDxrz3UTnSDnj2bm0tW1thDqnKTHSTQUy5y:hOgjR3hrC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_52674d77aa447fa73b70046a3e167983

Files

JaffaCakes118_52674d77aa447fa73b70046a3e167983
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 520KB - Virtual size: 517KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ