8e57c20a0f4c6f0ce63cb33538f9ea39_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e57c20a0f4c6f0ce63cb33538f9ea39_JaffaCakes118
Size

9KB
MD5

8e57c20a0f4c6f0ce63cb33538f9ea39
SHA1

1ee54c9fd63c22a34066b4aef64978a676165dc7
SHA256

2d823b2fc9e3eff738f6d148689f7a7bf1e1606000451d786b002ccd78a67edd
SHA512

4d822696b9b9e95be49fc3461fe98bc0cb41585fba604ec0608c30cc8910148199d62d98a974acd8f209a747e2a3c07dd0e95cb1ab14abcf58d76f68e08c42ff
SSDEEP

192:mBksuDzHNQ8H4eMZZ3893VnjdwqzE3T6wtJ:9H14eMoFnhwqoj6wt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e57c20a0f4c6f0ce63cb33538f9ea39_JaffaCakes118

Files

8e57c20a0f4c6f0ce63cb33538f9ea39_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ