JaffaCakes118_a9b47e9c482c8caa220e5eb28c61d503 | Triage

Sharing

General

Target

JaffaCakes118_a9b47e9c482c8caa220e5eb28c61d503
Size

288KB
MD5

a9b47e9c482c8caa220e5eb28c61d503
SHA1

866697a1bb2c42d8dfd56482f5a1eb22ce91e1a1
SHA256

9f58e624b9684fa5cef2a10c38dafe5edafa60e791f32ac14b6e5514f7d61be5
SHA512

8f0a55567962d4514abe2e5288e368c82acd22c5fa86cd737da0ca6562db806ad52bec03c231c5b73cd74f9f3685d117185fdd6b26ec76bf8c1422608c9f1eb8
SSDEEP

6144:yQeZ1Ul6Doyq8ioUZ1tJfVaDTAQ5YSv4l5tkRKMU+J3av1DGMi:yQeHGqWpLDGTAltbYO6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_a9b47e9c482c8caa220e5eb28c61d503

Files

JaffaCakes118_a9b47e9c482c8caa220e5eb28c61d503
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 276KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ