13d25ea0e7f46702f9efbe2f4c15c6dc_JaffaCakes118 | Triage

Sharing

General

Target

13d25ea0e7f46702f9efbe2f4c15c6dc_JaffaCakes118
Size

688KB
MD5

13d25ea0e7f46702f9efbe2f4c15c6dc
SHA1

1e67ed366188b10271e1aff19c6c04221a0144f0
SHA256

cfbba70f299c1d4beefaed0876f766b708776e6f6543c58b42037b7c1460ec93
SHA512

ef16d36d4f167d22d8776c50452aa0bf1ba611918f2f7e10394826be2a967ed2dcc28d01b65c317d8cef4439c405cd1739adc8f36870b2d9a17e199a79fec553
SSDEEP

12288:iN5tp+AdBeZatmv7iu5Fx/DxV7rD0KImt0LDTdB3I:i9Bev7xzfadB3I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13d25ea0e7f46702f9efbe2f4c15c6dc_JaffaCakes118

Files

13d25ea0e7f46702f9efbe2f4c15c6dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ehExtHost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ