e120b6229ca4d229c8b7c7dec8461e8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e120b6229ca4d229c8b7c7dec8461e8c_JaffaCakes118
Size

32KB
MD5

e120b6229ca4d229c8b7c7dec8461e8c
SHA1

0f6c643e47bd7aa0aec25aa2e8f827d6dc519b5e
SHA256

effa0e42ffb361082e4aad70b6d871f4524f9f67f13c117a2560a2acc736b775
SHA512

827ee4ac9e79d5d3e60ff980d3003c81dea39e8b9bc8159e591c3b1240ca5e4388a47cbb6d831dc2c5de75fc0ba2d5a52f7e052135ec2b23ed088a722640e4a6
SSDEEP

384:Krl+G9lxxMQL/sKKPiPREJZj6ny8AfGQHzfDXjEKqPaV+WN02Y:S+G9lxXIYy76nyNn62Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e120b6229ca4d229c8b7c7dec8461e8c_JaffaCakes118

Files

e120b6229ca4d229c8b7c7dec8461e8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ