e9482069f05b238b4673460856f33f16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9482069f05b238b4673460856f33f16_JaffaCakes118
Size

2.1MB
MD5

e9482069f05b238b4673460856f33f16
SHA1

41d1712665f208a3b45ace64cf408eb708767478
SHA256

84d2af06c6da4ad0a9ca8434d17602a6cacdbea66c3beb2c388715f78796a419
SHA512

ae4b5fac8323e4faf138e912de6d62fe148f58f04216a6d2d422fe3c7789b5c5b12dcaebd5bd8bc551452a3595767d92a0b8830ddde06caed4fac7fed7ced2fe
SSDEEP

49152:XPmDOXY+qTQicSfmDOXY+qTQicSUyxnBcB+:XSj+qT38j+qT3qQt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9482069f05b238b4673460856f33f16_JaffaCakes118

Files

e9482069f05b238b4673460856f33f16_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ