ed012df3ec050a4816500ce8242d3397_JaffaCakes118 | Triage

Sharing

General

Target

ed012df3ec050a4816500ce8242d3397_JaffaCakes118
Size

338KB
MD5

ed012df3ec050a4816500ce8242d3397
SHA1

507198b268c6c22253874864a5f1a679cdd48ca0
SHA256

97e9f31062cca05f9b380ef66629e707ce0f8d4f8cb10d1027dac081c3e88758
SHA512

a3ad859355f07679659162bb2d28e48d9f6b7b04ef4e6b9e7aa0c229a1d1803be5bd1c82b04b008c9c6e2e5d1170b6f62e39c51df61cd9b1715e4cd35099c981
SSDEEP

6144:1HUCw6pg4XLrn8W+O1Q10fVJXGYE6dgeoo/Pevfx0SJ:zw6pgeLrBViOV1GYzqvoeOy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed012df3ec050a4816500ce8242d3397_JaffaCakes118

Files

ed012df3ec050a4816500ce8242d3397_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 335KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ