ecfa329645aebb980e50ca77e9d0dcc6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ecfa329645aebb980e50ca77e9d0dcc6_JaffaCakes118
Size

1.5MB
MD5

ecfa329645aebb980e50ca77e9d0dcc6
SHA1

78d491d3dd8ccaa9f7b77b6687847e6f3f032a25
SHA256

59c10ea9a88e490190c661887d5050411754b09e83a3836bb4f7935d4f160a95
SHA512

bdc1a8a68cb1b37c1cfa309ca36ab52985d707296e7c1e109a7153727af0931ebeea23010a98941498c039efee61aaef1fc2fdf6c124c4e8895167ba32ce448f
SSDEEP

24576:kbfhKHkljBL1fMW+wsDaQw6DDz3qRyPnmGfrnvVUKueY8RmneWtJ9q3IVx0:kN7fMasY6DwOBfrnvV7UeWtXqGS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecfa329645aebb980e50ca77e9d0dcc6_JaffaCakes118

Files

ecfa329645aebb980e50ca77e9d0dcc6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ