ea01c78e0f39a1de19864a4605e93586_JaffaCakes118 | Triage

Sharing

General

Target

ea01c78e0f39a1de19864a4605e93586_JaffaCakes118
Size

531KB
MD5

ea01c78e0f39a1de19864a4605e93586
SHA1

fb88a6740e6316f8d168a273e0e892474c3d86f4
SHA256

14b98835cc44a97c3ccea697c83a9f5220fd4bb41720818b623ab0f88e20b654
SHA512

55fe6f5b08d70ed8e38b81b3c456f0fbe7907da8e82b8e5ec01528fbf534ffe9f67eb195a421368d732aac6efd9d8e1332959520919c5a4616f9c6b43a3da376
SSDEEP

12288:5nupsFkuxwRQBfZQNUpR1ugBt/bXMXx37NnF0Eodutrh:VOuZQN0NBt/r2tNF0Botrh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea01c78e0f39a1de19864a4605e93586_JaffaCakes118

Files

ea01c78e0f39a1de19864a4605e93586_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 529KB - Virtual size: 528KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ