8e53f17110c12f9ba0c5e7bb0aa8e1c9_JaffaCakes118 | Triage

Sharing

General

Target

8e53f17110c12f9ba0c5e7bb0aa8e1c9_JaffaCakes118
Size

900KB
MD5

8e53f17110c12f9ba0c5e7bb0aa8e1c9
SHA1

3114509ed63b0732f46f53f2543874d82281fb05
SHA256

ce52877f5ffac0bc8a03f65c237cd737f39287eafdd846ff2654c3fa08074264
SHA512

f7407c79d33230528efd1107eac01b301088e2d3af6eb20be6fd2ce0111c76654c92da1f300b2cd132a2dbfa7380c0bfb40351af29f8dca1b1f0c0d6bffa0263
SSDEEP

24576:XtLbIaWDVdH1yVaZB9qcU8UwEjiFeJRm:XtQasVZ0VaZB9WwZ+Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e53f17110c12f9ba0c5e7bb0aa8e1c9_JaffaCakes118

Files

8e53f17110c12f9ba0c5e7bb0aa8e1c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 888KB - Virtual size: 886KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ