eaf16aa2c9698a4c630cb50ccc92e786_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eaf16aa2c9698a4c630cb50ccc92e786_JaffaCakes118
Size

784KB
MD5

eaf16aa2c9698a4c630cb50ccc92e786
SHA1

a25066cafc4d27ab5f904a438af9d8807199454e
SHA256

9319517e89454aaed1f2ab5678085c4eda4a0b710af822b275ffae98fde8a833
SHA512

0deb411b15f544f237984ea01716a87b08e1ba1369969234beff365b1876109f4903545c24e9c4ac0ac996b06ce02bbd0ef3c2d42875f78e7eb09787de2186a3
SSDEEP

12288:gfqPcJzA8yJiFfT/6eN+LEueTiuVK8Qgn9N96v3GG4z7azgvc/l0tO:grMI3QV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eaf16aa2c9698a4c630cb50ccc92e786_JaffaCakes118

Files

eaf16aa2c9698a4c630cb50ccc92e786_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 768KB - Virtual size: 764KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ