e837ba78eda076c383676dfdb9846d36_JaffaCakes118 | Triage

Sharing

General

Target

e837ba78eda076c383676dfdb9846d36_JaffaCakes118
Size

736KB
MD5

e837ba78eda076c383676dfdb9846d36
SHA1

051b616366ae1b263cf3e4ce96bc07004469b383
SHA256

5baccdcd2956925b6280da41dbd94b190336e599b5f6f4bd1a1ed3d7ba9ca94a
SHA512

3997904dabd01f166c2338d59f4bdc012d4321dd3482ee867a4a86af6b701164a4a9c25fd634d376c961ecfbfc12ac867662358b7706180c9dee0c54713719f5
SSDEEP

12288:plkF+8T4iqLF5IDe5JX5VMm3hdCze1wiNYyAwdHh5rLiJgl2Kv:ph8TOF5IDe5Jp73Wzu6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e837ba78eda076c383676dfdb9846d36_JaffaCakes118

Files

e837ba78eda076c383676dfdb9846d36_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 733KB - Virtual size: 733KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ