99eee6816b1dbbb80cbb5082d2c82414_JaffaCakes118 | Triage

Sharing

General

Target

99eee6816b1dbbb80cbb5082d2c82414_JaffaCakes118
Size

232KB
MD5

99eee6816b1dbbb80cbb5082d2c82414
SHA1

cdbbc3d5d09d481038096c24a24a8d48c33e0adc
SHA256

fb51a8c32c9ab73b839799473f21113702599eb2708cedf5e5b3cf1e4a1824a2
SHA512

6cda429229a8792622c1676e9c1dddcf6807bfdde0911d8b2a6de39e7f068e4ba42add0b5c99ce795b4c29a9cbad459652b19aa8e04fa4e01f385678f93f66a9
SSDEEP

6144:ZZO4pwWLtkBtcD4oCGjN4eZAG+aObnXXX:HOcZ0c9otb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99eee6816b1dbbb80cbb5082d2c82414_JaffaCakes118

Files

99eee6816b1dbbb80cbb5082d2c82414_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 216KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ