e886113c82d8086f8cf68479960d04d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e886113c82d8086f8cf68479960d04d9_JaffaCakes118
Size

9KB
MD5

e886113c82d8086f8cf68479960d04d9
SHA1

edd0cd7b5364188c23ec09a41a0fd9d0e1ce6d66
SHA256

a8f13dfe989ce018defc11d7b22812c294c6a93263b4a249b4d2bb751674d6c0
SHA512

13a3595334c6d9c870e41e83c98f26112b01d9e2efabb8d1301744757f5b53ec60e407ced67869ae8949a3211f91873c44814a540e779f2fcee243ba3c9848cc
SSDEEP

192:7BksuzPY82gQv5F4WHtKeMZZ3b93VnjdwCzH3yfASnE:J82l4UtKeM9FnhwCrCD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e886113c82d8086f8cf68479960d04d9_JaffaCakes118

Files

e886113c82d8086f8cf68479960d04d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ