e1d48149b56e5a96bfc1ff0715abef78_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1d48149b56e5a96bfc1ff0715abef78_JaffaCakes118
Size

363KB
MD5

e1d48149b56e5a96bfc1ff0715abef78
SHA1

f9697759d13252a1d9447352dfa5a56649bcc263
SHA256

fd1acc0c70163f53976c332cfcf4798e3ef77d3ba0194d00a314710a0c5ec60e
SHA512

f5c3f8842a9f1aca338322fc608c8c1a25f028ab253b3d0e0fd83583f36a86f2c371bfc3b2da994161db85197f96a5d890a19de8f63f24cc1081c84bfe8f6c9b
SSDEEP

6144:B46P1W+Lt+eckVqybwHiFiRXKVCQMA/S1/m+P5EvJYKJ4nC/N9:B6+LtPckVXECGXgrvS1/mE5EvJYKJ4no

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1d48149b56e5a96bfc1ff0715abef78_JaffaCakes118

Files

e1d48149b56e5a96bfc1ff0715abef78_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ