c2ebf7eb257f86754ed67cbe47df9c4f_JaffaCakes118 | Triage

Sharing

General

Target

c2ebf7eb257f86754ed67cbe47df9c4f_JaffaCakes118
Size

489KB
MD5

c2ebf7eb257f86754ed67cbe47df9c4f
SHA1

adb2678b6166f5b6d6c1fe1db9d8db7442f62051
SHA256

3fe0275748a53c76feb7146d57815397da2d3479562b21932d7f68b6cfe10dbd
SHA512

c4fd2a513d0ee969c3bfe6031ae3e1f0febb2a5b41e9d7ea48ccee7ee1631890a888e806b4d6f572629302a4c82e3801ead0c0053bf4746e3c7b6ac15028a860
SSDEEP

12288:rXi5LqWn/l9Lb9NzAbWDGlJkiqYh+qKSBb:O579NzwW6lJkiDhFB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
c2ebf7eb257f86754ed67cbe47df9c4f_JaffaCakes118

Files

c2ebf7eb257f86754ed67cbe47df9c4f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 486KB - Virtual size: 485KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ