e0e70da05eb0d81a459ccfac11959c39_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0e70da05eb0d81a459ccfac11959c39_JaffaCakes118
Size

1.3MB
MD5

e0e70da05eb0d81a459ccfac11959c39
SHA1

402de85037ee8c4140c2f992d0b9de764c04409d
SHA256

c046f6f685f404d8553bb9593100d3c66bb616fc5de6d08e4c42ae038de14954
SHA512

135c72a399f5ba9e99cb32d6b6f9fe4f47f4b6be59aefc590ee6b0a50435a70d94f008d23d9e8658780735fe07c5604db7b5db92597d663056d237714ff42950
SSDEEP

24576:kbfZgnaOHSBW+wsDaQw6DDz3qRyPnmGfrnvVUKueY8RmneWtJpq3IVxy:kgKasY6DwOBfrnvV7UeWtLqGg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0e70da05eb0d81a459ccfac11959c39_JaffaCakes118

Files

e0e70da05eb0d81a459ccfac11959c39_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ