JaffaCakes118_9c2c6c41351d0c01b3ac3ff5569cbd4b | Triage

Sharing

General

Target

JaffaCakes118_9c2c6c41351d0c01b3ac3ff5569cbd4b
Size

1.5MB
MD5

9c2c6c41351d0c01b3ac3ff5569cbd4b
SHA1

3025388fd48170fd1fce115e40e869d0d1691a77
SHA256

2bc30084a3aecc80cc8ebe5fbea0a4db6d24e17305a982ec38d429ff3a39a579
SHA512

9f01982331e726c25454c5cb17e4ce3972b6fe964476a6fc37564d93ac9c90404b796370cf396b9a7402be0d5d4f4c37f83604ac89f6bcb57ef2a18b5787335e
SSDEEP

24576:glYX0FaQIN7tFt39eZDE+WUHf0RMDFuW9aYCo6c1ASB:gykFaQyRezsWsWx1Aq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_9c2c6c41351d0c01b3ac3ff5569cbd4b

Files

JaffaCakes118_9c2c6c41351d0c01b3ac3ff5569cbd4b
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ