a0e2440e4fec08526b0bb852b1991ce9_JaffaCakes118 | Triage

Sharing

General

Target

a0e2440e4fec08526b0bb852b1991ce9_JaffaCakes118
Size

13KB
MD5

a0e2440e4fec08526b0bb852b1991ce9
SHA1

8bdda9fb53a8f88eb9f7f9d5362939bfb373844b
SHA256

1cb19872dc504dcd3bd2a3faa7b37964ab13a612d7f074469586899460fd7145
SHA512

840739f256b201a0d7c59e1b9feaa5fe80888a541df46beead33b788c1dbeb92b8faa94d332189ba6d5fbea8dbdd551546d491c87f3bf0651249e9372e588f86
SSDEEP

384:e3rxDqyIGOJ/5YIUCMz02VJh8zsk0jO0ro:e3NDlI5J/5JlpWgs/jPE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0e2440e4fec08526b0bb852b1991ce9_JaffaCakes118

Files

a0e2440e4fec08526b0bb852b1991ce9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ