e52d9eff1f9c458308401b6a3b86be86_JaffaCakes118 | Triage

Sharing

General

Target

e52d9eff1f9c458308401b6a3b86be86_JaffaCakes118
Size

544KB
MD5

e52d9eff1f9c458308401b6a3b86be86
SHA1

44a055d31a46cbb8741cd17ce10b431743e84f72
SHA256

38f33fb3fccb12a2fca3dd5f8cd394470bf9db64948c76c205454fed8a7a78e6
SHA512

43b827e59dd4cbee30c154d1cb280bac575bb477b416d1c038e296ee1290c572139b815db49b3934d8f7672f2c7a6a1bcd583c4f091bc5e4418a4fb8da85392a
SSDEEP

12288:1PdHBc0aREtpHkEZx/jjPrAvcUGXBwM5/iZ:jHavREtpHPZRjnAvhGX6MO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e52d9eff1f9c458308401b6a3b86be86_JaffaCakes118

Files

e52d9eff1f9c458308401b6a3b86be86_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 541KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ