ed43e8db2f613552b3a225d67929f582_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed43e8db2f613552b3a225d67929f582_JaffaCakes118
Size

535KB
MD5

ed43e8db2f613552b3a225d67929f582
SHA1

fb4239a543f7d31468890a09c507232c64676f83
SHA256

0503c0d0c8dfa7e880f84299ee55ad578e97c248ca7af255ae8e7d762c7aff29
SHA512

e9afa1c4af9db043739746792fd9ca6ad73484c1420f465e5388131b1bef16f8bf57545030dec80167806475e2a7bbb109d6b51eb50ee12f81af301740ed8d29
SSDEEP

12288:vIorjK0WooCkNs2I9DJzGNGflHZaM+uR5Rz8H9a2:v7HZWo76sf/fRZdXt2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed43e8db2f613552b3a225d67929f582_JaffaCakes118

Files

ed43e8db2f613552b3a225d67929f582_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 518KB - Virtual size: 517KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ