eb950ae84db2dc16f721cebde0f1a0ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb950ae84db2dc16f721cebde0f1a0ce_JaffaCakes118
Size

74KB
MD5

eb950ae84db2dc16f721cebde0f1a0ce
SHA1

731cb9b7a00bc12f926f1911f8a93ffa26102d17
SHA256

0a776b601328b72b60e49c6b4dc24803442407cf1ad49296699d1bb0c3897464
SHA512

1020eae63c8f6c047c16a5588f8c644fdb1885881a5d614c5b967ef3fdd0d8380d34f8db086f525fb705ac841b5fafe71c28530d5968c485d61b27af8f7ce662
SSDEEP

1536:1b5EBxuD4s1CXZIGHHCv9ucv8hitZ2RtCMXVpxbdRxj:122GngucvmiCRxTd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb950ae84db2dc16f721cebde0f1a0ce_JaffaCakes118

Files

eb950ae84db2dc16f721cebde0f1a0ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ