ec21170142adede052901ee0cc56bf19_JaffaCakes118 | Triage

Sharing

General

Target

ec21170142adede052901ee0cc56bf19_JaffaCakes118
Size

420KB
MD5

ec21170142adede052901ee0cc56bf19
SHA1

7a23b36e9143709c21b029001ed57d075c165678
SHA256

b708a805c722b7381578b6bafc83aba1cbf1ff8f499c210cdb4d92159e47ebc2
SHA512

fbcf497bf6f3266c698a7e2e00662ba8913ffd1cb99286a853060bfc7166e444af3af482a178a7a4e3b51dcf6248c20d911373d3823e579d407d9e1914e7b66c
SSDEEP

12288:KqE6Zlh/f/2xqQeoTI4XfpVqTbVgem6S7:KqEihux1hhV8by9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec21170142adede052901ee0cc56bf19_JaffaCakes118

Files

ec21170142adede052901ee0cc56bf19_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 408KB - Virtual size: 406KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ