eb8dd0d63dea3d8b158afa303a4eb37e_JaffaCakes118 | Triage

Sharing

General

Target

eb8dd0d63dea3d8b158afa303a4eb37e_JaffaCakes118
Size

9KB
MD5

eb8dd0d63dea3d8b158afa303a4eb37e
SHA1

1338ff2089e2a42433e493d4b7c9890e868ca4f2
SHA256

63447828d9540f4dc6fab49120140157ae504a5b4c7791bff32b75fa8b7c7235
SHA512

a5980f2ebe64d13cd45e931505cfcb01d3908eb5ba3d5ddb2928bcb6af386bf7f1ca3187ae2ab4988373ea8f9bad43e57dd5050b49ac24cccb4dda28bd4c42d6
SSDEEP

192:oBksuXDUSOV2oRjeMZZ30593VnjdwCz4v3LlGC/:nGjeMkFnhwCwQC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb8dd0d63dea3d8b158afa303a4eb37e_JaffaCakes118

Files

eb8dd0d63dea3d8b158afa303a4eb37e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ