de08e3b7b2f192d2a42d06bd030128ee_JaffaCakes118 | Triage

Sharing

General

Target

de08e3b7b2f192d2a42d06bd030128ee_JaffaCakes118
Size

415KB
MD5

de08e3b7b2f192d2a42d06bd030128ee
SHA1

7a0d5988e848127f523ff9f4247425320fbbb993
SHA256

661dfc3a33769e60554a0ee692f200858c07b685ee588ec69839bd5dad8b502a
SHA512

70ffd2d361a14618414d1a99311412e49f13e2af3d98e08240b726eacd0f4279e51a6cd91c95ca926b87f705ab29a097da63aafae0cf79739a45fc8a2fae6b66
SSDEEP

12288:HJ7JBvWDJD7M/03eALLcQRGkbhBSiIecEt:H/1wpR3eAnPki5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de08e3b7b2f192d2a42d06bd030128ee_JaffaCakes118

Files

de08e3b7b2f192d2a42d06bd030128ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 412KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ