e1f0a2e1c617969716c5c109b63058f4_JaffaCakes118 | Triage

Sharing

General

Target

e1f0a2e1c617969716c5c109b63058f4_JaffaCakes118
Size

68KB
MD5

e1f0a2e1c617969716c5c109b63058f4
SHA1

367da8f104e0ae6a2618c1bbb5936ce9b762730e
SHA256

c7fd39ff2b936104766c64c0b0b5c1d233b8630b0df757007a3e74f5b11344f0
SHA512

18d74f50f8bfda50b4d9bc936a03eaab69aacb6123697dfefe3401eeb915fb3bd75d7cc4cb095ce0fa155d67d550eba3af73e297fbac1b70ce6d343546b00a8b
SSDEEP

1536:uKupvclwH04kTEwAzAHPOo0mN1s0EakBQ:4iwRkTElAH2oLs0RkO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1f0a2e1c617969716c5c109b63058f4_JaffaCakes118

Files

e1f0a2e1c617969716c5c109b63058f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ