JaffaCakes118_81ac941f4656cd813d8a8a7531fcf810 | Triage

Sharing

General

Target

JaffaCakes118_81ac941f4656cd813d8a8a7531fcf810
Size

752KB
MD5

81ac941f4656cd813d8a8a7531fcf810
SHA1

987ecd48d85822d07ef82a816b54592ba68f1fbf
SHA256

22d4e27facc271bd086683e226018d2ff7bb89a4f431b2d5d5748801dfa5d2c9
SHA512

0c5ccb14b5b70df0cae993d64e8feaac4e668e162311940a06ddaf58ee17d56c23c5bfb4f4319d041982c9226987a420911846dab90c11653de416115112b819
SSDEEP

12288:OiNMR4/esWP7ozoChmD4p58OofToTlLP4CbVP5CTNrfGUrypQAHFYJ2CXtzxfpM:OihTWkGwcD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_81ac941f4656cd813d8a8a7531fcf810

Files

JaffaCakes118_81ac941f4656cd813d8a8a7531fcf810
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 750KB - Virtual size: 749KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ