ebee31991b156db114ab560139198d8f_JaffaCakes118 | Triage

Sharing

General

Target

ebee31991b156db114ab560139198d8f_JaffaCakes118
Size

791KB
MD5

ebee31991b156db114ab560139198d8f
SHA1

59326bdcd208d288adbe67690e1dbeec0da26722
SHA256

3334766a549149bb18921ea6d05343412c99d36b57e3993b7610dfe689f5f194
SHA512

c2cb8649d644b394437a76fc34ef6fbda2a020fb565a0f457e2df41d5dec1c6bba26eaefd25d78c82964d43320a393b40728037672d14bd236893043b180744d
SSDEEP

12288:eBfMjmtiNSmyDmJomIyx8OyHpBvygTUxiGwD0Pu0sIPWfZ4OU8IqxucBLC9J:eBtnpBvygA8LUHFr0O9J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
ebee31991b156db114ab560139198d8f_JaffaCakes118

Files

ebee31991b156db114ab560139198d8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 722KB - Virtual size: 722KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ