ce401256f95b818e4034b7637d13895d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce401256f95b818e4034b7637d13895d_JaffaCakes118
Size

168KB
MD5

ce401256f95b818e4034b7637d13895d
SHA1

3bf186e57c67440a16f6dadecb0eee7978f64d83
SHA256

eb536c96bce6594af5f622ccd701f32fa50fce2d70fd7aa8a573881ada723ffc
SHA512

b45e63d6d0bc6f110dee248322a274d642cc227c2dd184782850d20fae5ccff283c33f1d98596b870429fe8b5bb3b16f9fae5fa3fc8f9eb732a0be7208d233f1
SSDEEP

1536:TOx25tCK+aVOdisQ3RV0ppDRk0dCCLfienYSY8mgxW/WHw6mKMT7tItcbQMZfcIN:TOeNEEsjLDaCqSrNW/WQzKM+tP+cL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce401256f95b818e4034b7637d13895d_JaffaCakes118

Files

ce401256f95b818e4034b7637d13895d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ