eba7593ad7cf8d298889333369330633_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eba7593ad7cf8d298889333369330633_JaffaCakes118
Size

924KB
MD5

eba7593ad7cf8d298889333369330633
SHA1

0001b0b2898834f0d3f82f97853e3f1be74d7868
SHA256

fcb563984d0a83d80370331f6008e5d6183c40bbea7fa16ff40f89a6cb27fe27
SHA512

f8283528200799aee0ccaeae260c3adf24b096e51374ab8030869a9fe967be7b28a1cf19d3dbf2e4f54c89375c528d17eceb2ee2dd02afae4d5da2b5c5ffda04
SSDEEP

24576:C0wH8h+7s0FrzAFVK2ZxBq/2mCVRDhFLWGPJUW:CVcFgk5ZsyRDLfq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eba7593ad7cf8d298889333369330633_JaffaCakes118

Files

eba7593ad7cf8d298889333369330633_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 801KB - Virtual size: 800KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ