ee243a5d55da1ae9747db59ca1d32f2b_JaffaCakes118 | Triage

Sharing

General

Target

ee243a5d55da1ae9747db59ca1d32f2b_JaffaCakes118
Size

6.5MB
MD5

ee243a5d55da1ae9747db59ca1d32f2b
SHA1

f5b590379f316e40b61151c12490ddc83aa17dc5
SHA256

a70325fd7314f54c43623316fcf8e7cb993570d8cab123a9e16ef7f5d5260309
SHA512

4510176dd723ae3f95b21d6a1afe25639e9fa06d0e3e29f5093b7e26a395dbdf7ae6490ff08a6e1fdc21b269d9a961c9f52fd36ce276d15364b20cf77b956cb2
SSDEEP

98304:/94Bxd7pLwwhfAqVo9Eo7bfkNxU+1Nhga4a/ZSm:/gdOwlhNqa4a/ZSm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
ee243a5d55da1ae9747db59ca1d32f2b_JaffaCakes118

Files

ee243a5d55da1ae9747db59ca1d32f2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.4MB - Virtual size: 6.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ