e0dc16cd3831d8ace550eadf474e05ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0dc16cd3831d8ace550eadf474e05ac_JaffaCakes118
Size

2.1MB
MD5

e0dc16cd3831d8ace550eadf474e05ac
SHA1

7d85bb9355a4178a9fc2eefbb6879928c6858d08
SHA256

eb6227dd346126017d2035e620a4e1e1a06a08dc7afa258e16e505d616d1cc92
SHA512

f66b575c185139ed9d73128b6d163b7008491492b2d1063c43aabfae71e2dd4742cbd6141e119c04d8b6c2d4cc67e3ac5ccb22d0ef760cfd6b2fc7bec26ee850
SSDEEP

24576:LMq5SAGnFq5SAGn8q5SAGn3q5SAGn1q5SAGnb/nxwkejBOq5SmGnn:Ncbkcb5cbacb0cbrx7eFcR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0dc16cd3831d8ace550eadf474e05ac_JaffaCakes118

Files

e0dc16cd3831d8ace550eadf474e05ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 217KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ