ae80242d735df3029d265dfbada057d9_JaffaCakes118 | Triage

Sharing

General

Target

ae80242d735df3029d265dfbada057d9_JaffaCakes118
Size

272KB
MD5

ae80242d735df3029d265dfbada057d9
SHA1

0323d16d4d93ab0db9a44a8650b7f316e2f447fe
SHA256

414827656b8ff8c401db2f34db34a50872ac93d292bce52358b901fbc7aa8dca
SHA512

377dd57854615b6526eacfbc3f1b6f6c8edafca3a017d6c987bdf5e434540d0e8a0cefadf426aee883ddf84b255145b99ec74b78ae892af16b0fea183778ea4b
SSDEEP

1536:IxNMUrYmT143/KZVvCkeRuCr62MeGcZD6vDCeUbUrYmT143/KZVvCkeRuCr62K:4NMYTauGruUitUbYTauGrE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae80242d735df3029d265dfbada057d9_JaffaCakes118

Files

ae80242d735df3029d265dfbada057d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 265KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ