e15996280bdc2a39a88e4e03a12dddbe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e15996280bdc2a39a88e4e03a12dddbe_JaffaCakes118
Size

117KB
MD5

e15996280bdc2a39a88e4e03a12dddbe
SHA1

295e975baee4990b6b415cf825d2318426b705e0
SHA256

f1fbe3d43016a22dcb9b9c24816b78ad76de92dc65506a74645d47a5ffa76dd4
SHA512

f310aed7766775ded18d8d8af9f9b5e4240ef0373fec1726c657bf37083f0ef13da25f26a429e51b38a0f89d89ea53f298a4f0d495fc4bd387c35984b81476f4
SSDEEP

1536:jTQtdijNtRgbirUH+moG5jCnFIEqusIUbdBp6coIbgjQllf:jjpVgH+BG5SFwuxUpBPbgjq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e15996280bdc2a39a88e4e03a12dddbe_JaffaCakes118

Files

e15996280bdc2a39a88e4e03a12dddbe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ