0ea9c9dc673e72849f3f0605fb8856b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ea9c9dc673e72849f3f0605fb8856b8_JaffaCakes118
Size

475KB
MD5

0ea9c9dc673e72849f3f0605fb8856b8
SHA1

7364befb15036e3c46048ca24ab4d8fbd3e045e2
SHA256

c0d3c2975869915678d77348648ce883cc50ba506c0c5215b71f9eafb7b3f5f3
SHA512

ac6c300e9d6f7a16ef212b2637b911b4ec69a360ab1bbe393e3a5b16fbfe16d651e76860c28a1f8845b0f3116c7ab814f25827ba9b95032b2f9ef79bece40cfc
SSDEEP

12288:7T61qyM+EwlF7C367qxlJGvXwL/3wXtWewM81:7kbJEwlFu3FHRaeM81

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ea9c9dc673e72849f3f0605fb8856b8_JaffaCakes118

Files

0ea9c9dc673e72849f3f0605fb8856b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ