e7cc964d4defa9363274f29f7fbc42d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e7cc964d4defa9363274f29f7fbc42d5_JaffaCakes118
Size

7.5MB
MD5

e7cc964d4defa9363274f29f7fbc42d5
SHA1

09852fb45cc90d5a286c4121fead7893123b7e34
SHA256

6d3d1cce77072a67e744a9adfc62d8b1465078e0ef0559b90d0ca0727d4cad44
SHA512

f8b0fb9dcf370e9fd654b3e1f28dd3fdf66a27ed691ef386402e4ce50776c66697c3a8a6fd2b909295fb2dcfb6a83570e18edee59884725ca800cf91bf995805
SSDEEP

196608:YPZUc30d4qo+2pbuMyu88msqWuUCRI8NX19Srw:YhP30dy53bLclkrw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7cc964d4defa9363274f29f7fbc42d5_JaffaCakes118

Files

e7cc964d4defa9363274f29f7fbc42d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.5MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ