JaffaCakes118_b4f22bccf52eda61050598f52f9c6cf1 | Triage

Sharing

General

Target

JaffaCakes118_b4f22bccf52eda61050598f52f9c6cf1
Size

632KB
MD5

b4f22bccf52eda61050598f52f9c6cf1
SHA1

e6567297d6598c7424cbb19545abd6a3dbefb3f3
SHA256

7a8c6ae02f2852da5c1acfaf06fe88a12dd73db72ea743a99a9f8ffe49a69437
SHA512

57770dde75d9061b6524a0bfc5428541ce925933b9c2a1e8e6fbb2ddc4f68e1c89de6d3e686f68445086bee84d03f3755bcdcfa22441b89ba4a9a69cd5f4f0b1
SSDEEP

12288:FtN2AGgO2i0uSPjbLxza6A0/QuUtc/8xUEX0T7t+GGyT:UAGtSP9W5OicUCEX27F3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_b4f22bccf52eda61050598f52f9c6cf1

Files

JaffaCakes118_b4f22bccf52eda61050598f52f9c6cf1
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 604KB - Virtual size: 603KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ