eb0bbb93c2b57bd59273e930840c904f_JaffaCakes118 | Triage

Sharing

General

Target

eb0bbb93c2b57bd59273e930840c904f_JaffaCakes118
Size

820KB
MD5

eb0bbb93c2b57bd59273e930840c904f
SHA1

dac9be6b078b0d48cd3a87059656978e9892c0d6
SHA256

c8ad659946568b83fea351622cb5f8ea5ae4bec77f0f20d16a76613d169b5924
SHA512

cf1d430b18c3493cf9283ddf55a74aad6c0b4e2182b26f0b30eba6691f989d12278d5a67268841f07b35025198651a54887991744db62d36e283e156b5d672e9
SSDEEP

12288:1Io+/Ip6HonjnSGc96AxyWTs7lZHYNCPckHrwGYSRPozE:17YI4HOVwTw9XH44A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb0bbb93c2b57bd59273e930840c904f_JaffaCakes118

Files

eb0bbb93c2b57bd59273e930840c904f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 815KB - Virtual size: 814KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ