e06eabb5ec39afc9df92a36d9aff7347_JaffaCakes118 | Triage

Sharing

General

Target

e06eabb5ec39afc9df92a36d9aff7347_JaffaCakes118
Size

539KB
MD5

e06eabb5ec39afc9df92a36d9aff7347
SHA1

bef2716ea80432f5c196f900d0cf0c06f2449e51
SHA256

ddce93e04303bababc6a38bc0ee011ac8d55905f9f32d3d2f21fcb31de681dce
SHA512

2ce3afd280c014952f1122a54c4b0c8d0045f57f78b3e8f62f4e1ccfd3b8102c893a0f1218b0a26b9365109dba01e88fc89b653b503175f93fc77e35d350123a
SSDEEP

12288:egz6hG1y9YgggdiK29lBWd32WlqzSsT/HuiwZdJYzinq6/lT:vggFvBA2hWifqZMiq6/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e06eabb5ec39afc9df92a36d9aff7347_JaffaCakes118

Files

e06eabb5ec39afc9df92a36d9aff7347_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 536KB - Virtual size: 535KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ