e27b06ec08f02ba195531c7bd4ba1d0f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e27b06ec08f02ba195531c7bd4ba1d0f_JaffaCakes118
Size

3.8MB
MD5

e27b06ec08f02ba195531c7bd4ba1d0f
SHA1

1a1e2822061e56baa7582fee5641d3b36d240342
SHA256

4e89e5831d65527ae35dc67ae06cfbcd64ddb2aabefab4e1072730e9f321c18f
SHA512

20a506e5977aa039dbf02fa2986fdbc5c6f08a4a181495d03784e62a536c75187c2324e95cd99edd2704cb3f87995709f0833e6af1849d8bf7a735385c890e68
SSDEEP

6144:fwyT89bLN3SSZZSk3YAQRSWLcXRd2c6pNx:oEZySk3YXRpLoRC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e27b06ec08f02ba195531c7bd4ba1d0f_JaffaCakes118

Files

e27b06ec08f02ba195531c7bd4ba1d0f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ