ce7844fea4d0cc5578b5cc2d7b59c1c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce7844fea4d0cc5578b5cc2d7b59c1c8_JaffaCakes118
Size

711KB
MD5

ce7844fea4d0cc5578b5cc2d7b59c1c8
SHA1

305d1f717be2639b02dcd62a5f1bdadad57b398a
SHA256

96ae160515660181b7ba2b712c442835fcc76da5628ac3c3921f6502db900c2f
SHA512

69825a632d7910ff179e4d8493241a8a0976f537f20ba1f3da049ccca15334b1033cbc2a0d5eb97585a05381a893d135a74b7e38e192b1fa381e85aee50c9998
SSDEEP

12288:00isFb9MGuPy21dsNcJxtuE076jEW1irgNO5TxTHtYEMfKvmnsXwr3F:PFb9J28crk2jx00NO1gSunaw7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce7844fea4d0cc5578b5cc2d7b59c1c8_JaffaCakes118

Files

ce7844fea4d0cc5578b5cc2d7b59c1c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 631KB - Virtual size: 631KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ