ea6329cac93654014b5b73acffd3b949_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea6329cac93654014b5b73acffd3b949_JaffaCakes118
Size

15KB
MD5

ea6329cac93654014b5b73acffd3b949
SHA1

dfc0d2b78b95d7f4e596bf027cfcf8cd48302913
SHA256

44b90249ac4175cf969f64241767c3344fb219432c8990140b6e23c14de0d5e4
SHA512

4a780fe115e04f91e5d77975ccd36bdb042b7a67f17c44ab139fb6a7dda4c1d40c8e7027aae9f46aa9538d970f52c0619f697bbc4d262a621e117b75f6e82272
SSDEEP

384:ZMyjLBwBWHEVfiSLpSZXtqraUEqrDa75ic:tjLBwBZQ/Ugsc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea6329cac93654014b5b73acffd3b949_JaffaCakes118

Files

ea6329cac93654014b5b73acffd3b949_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ