0e4350ed87dbb180b7b74f0c2fe02f42_JaffaCakes118 | Triage

Sharing

General

Target

0e4350ed87dbb180b7b74f0c2fe02f42_JaffaCakes118
Size

388KB
MD5

0e4350ed87dbb180b7b74f0c2fe02f42
SHA1

d9ecee0d9ed754a22c4eede70535e75b252a8c2f
SHA256

05a800bb0a40700fdfadd866a56da4b5e9a47f93af214a18665b3abf904bfaa8
SHA512

9519f9b97f4b9694292a305af55ed5f1e7c42ca316ed23d618dd5a14d3997ce344d95b84bea9102a2908f961e05baf51161071016ea2ce323054541058d8861b
SSDEEP

6144:6ZFhtnLFj1IXxOW9jedM+25RISoh9b3TbU1fgIOg2Y9RGHZDYK:oSHedM+25RsUfgTQI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e4350ed87dbb180b7b74f0c2fe02f42_JaffaCakes118

Files

0e4350ed87dbb180b7b74f0c2fe02f42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ