e8ab6b0ca4e603328cc4561bf05243c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8ab6b0ca4e603328cc4561bf05243c6_JaffaCakes118
Size

787KB
MD5

e8ab6b0ca4e603328cc4561bf05243c6
SHA1

ed6027a0e89b4e35077e82d1c785224904fbcf24
SHA256

3135c2d82800dca37b92f19b2cf806f7a4f06be85f3bc07cf46f4bfd78fca710
SHA512

dc4044d6abf28d422a7024ba34447a1835aa512970b3684417cb3fed3003d0c60247c7527634ad5422bcaeb7046154121a55670ab6bfcc7ca15d7ab6e4e4327f
SSDEEP

12288:IL8Dc9F3nC0Py3gAhYKO81W2I+NGjKiuJhc9XLmAjs7ZmQWRQ+3:IrA1GMG7uJYS379W+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8ab6b0ca4e603328cc4561bf05243c6_JaffaCakes118

Files

e8ab6b0ca4e603328cc4561bf05243c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 785KB - Virtual size: 784KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ