eba170b0bd8962959d7089b69d77a940_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eba170b0bd8962959d7089b69d77a940_JaffaCakes118
Size

4KB
MD5

eba170b0bd8962959d7089b69d77a940
SHA1

1f6cdb6dafba2294fc879abee589c165b54337ea
SHA256

5d6e9994d0bbf62e4fe58446e280d219797db20824c3c5147ad7bf192397c01c
SHA512

41613d3c1abc2dc8abcee7fa4d735c86823da888d7c24abe08216aed098afafdf101b32cfffd7af497eae0e0cedc136380941ab4c91c26d4806ff2410cc9b9d8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eba170b0bd8962959d7089b69d77a940_JaffaCakes118

Files

eba170b0bd8962959d7089b69d77a940_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ