eb225913f67536c58db8aea5a0c8b466_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb225913f67536c58db8aea5a0c8b466_JaffaCakes118
Size

434KB
MD5

eb225913f67536c58db8aea5a0c8b466
SHA1

4965541d7f12504668cb98416a583cf12af6582f
SHA256

b0a57145f617b51a6c1cd3d9a029d9b236abc98c9c8d73e33faaeaba09309cfd
SHA512

aba64c6cd2141bfa9f89206a1b94b8bd5687c28828ba3325821a553a39ddfee66f5fa4eeaa5a6d54d0fcce2a474de3e3b02f363be2ddcf7528f5a0654679feb7
SSDEEP

12288:Mp5Jm+1GwiBerjbIsP7jH87WoVpDJmAroxNp/:aDhtTjbJP7jX6Z3ER

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BL Draft_ONEYDXBB14291300.exe

Files

eb225913f67536c58db8aea5a0c8b466_JaffaCakes118
.zip
BL Draft_ONEYDXBB14291300.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 488KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ