e13fa6e936e8a982617093a821dd154e_JaffaCakes118 | Triage

Sharing

General

Target

e13fa6e936e8a982617093a821dd154e_JaffaCakes118
Size

661KB
MD5

e13fa6e936e8a982617093a821dd154e
SHA1

9d2efab9ec53bbf9f0af9a0f226b495084b932b7
SHA256

aa191d6a495ebfabbf26e40bb822583704482959794887d4299506065a7286a3
SHA512

cea6e54fc51ee14f5d58a95a15de60940e56be22b99d86c957433ef6734155f5dffebfce00cf15c9b1eda57fa2b268f4a1174311d3c4c9040084876f43ab3c7e
SSDEEP

6144:kGS7I6CUyOY8X9jXmagrgT7pkTlOzNBV:kGS7IwcwjWv8m8hH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e13fa6e936e8a982617093a821dd154e_JaffaCakes118

Files

e13fa6e936e8a982617093a821dd154e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 656KB - Virtual size: 655KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ