e2470cb7d76afa38e26238eb3e6874ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2470cb7d76afa38e26238eb3e6874ba_JaffaCakes118
Size

534KB
MD5

e2470cb7d76afa38e26238eb3e6874ba
SHA1

d4aec1246ca2413b315e0b0afc66a51eace0df1b
SHA256

844416aaef57296371559f165fa5138d36f5437b71f05cb137af9f305f391379
SHA512

dfb07bd716ee2549180d16e47e772f7f3d5dc92654712b5ca823516fcb5550c04ced3162bf13b1f9feb9d61c198aa956b864925423cf009de99a18f060b94a1d
SSDEEP

12288:fsts7COR5x0fgi5Q9tm8UrDDgWBqRoT0lJSmS0z3lknrRjmh7jl3:9DvHBufhYMu3SVjMl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2470cb7d76afa38e26238eb3e6874ba_JaffaCakes118

Files

e2470cb7d76afa38e26238eb3e6874ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 517KB - Virtual size: 517KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ