ec2724a39a0b0aa60505a7016f214ef8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec2724a39a0b0aa60505a7016f214ef8_JaffaCakes118
Size

64KB
MD5

ec2724a39a0b0aa60505a7016f214ef8
SHA1

3ad4d865c8e9d14822cc9e43deec39b58c920dd9
SHA256

db92daee9943966bbc0b606cc271e811f94c46db4d6ca8c25f822bd496f5b808
SHA512

7543f5f34d4da795ba00761fdec48338d79e69f60899fe12e32bd547c2012ea98109ce15e1e9d8f89dce74cdf9c479db15986afb36da57361340708e2bc6af45
SSDEEP

1536:5j5KmC+DLfA701ABPDz6O8MHLwFxWcI3K2DWzo63:FtLfA701AD5Kt2g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec2724a39a0b0aa60505a7016f214ef8_JaffaCakes118

Files

ec2724a39a0b0aa60505a7016f214ef8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ