JaffaCakes118_a84baabea308c949bf1e1a1dae41a359 | Triage

Sharing

General

Target

JaffaCakes118_a84baabea308c949bf1e1a1dae41a359
Size

580KB
MD5

a84baabea308c949bf1e1a1dae41a359
SHA1

a0f1a8b0b6b7ce1bae9d6709e1abb4f09cb93595
SHA256

99ac103edaf3223999fad0faab5f82d4871f2a705a671d62cc54656bcfb6874c
SHA512

cd491bef426bf0d5bfb2742989f6714465ea3be4a56d935e5787c7e6527f939cbbcc2e7fd026d7d98df5073bcd02fe1f7899f04136ad27d83ac29269bc08b8d3
SSDEEP

12288:IrAj6YxbVAEqB4Tk8scKKEEdQIMF+8CMtgbcGGKQ0249nGet:IrG4v3+VTYe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_a84baabea308c949bf1e1a1dae41a359

Files

JaffaCakes118_a84baabea308c949bf1e1a1dae41a359
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ