e8ac3c450556520d1a727a4cb6471213_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8ac3c450556520d1a727a4cb6471213_JaffaCakes118
Size

313KB
MD5

e8ac3c450556520d1a727a4cb6471213
SHA1

647440bca792263ddbf02b9d067cbebc0f7c0b11
SHA256

cd5864d5df812b699c66361a08d70682703911f37e5f5fb9b39a660cfbc582ea
SHA512

f3e2c32b090ac8a942d121ec5acf0318c9411b6249ca760616682f0b0daf0c1b687270a86f2341407305009bdda5dc1cf29faf47de331999cbd6b14a7c85bed4
SSDEEP

3072:9WUElmXkJr4Dul8kZyLA93qlUD2mvwV6bFcHSRoodGv8Z3WKvLMgNdAWcmgZbJSI:OogNJHWeuKwv4U6L7NrE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8ac3c450556520d1a727a4cb6471213_JaffaCakes118

Files

e8ac3c450556520d1a727a4cb6471213_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.xtvb
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.mcex
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ