ebb57183b70b750ea3b7d254df1f1111_JaffaCakes118 | Triage

Sharing

General

Target

ebb57183b70b750ea3b7d254df1f1111_JaffaCakes118
Size

115KB
MD5

ebb57183b70b750ea3b7d254df1f1111
SHA1

df2518f09069d21c091fe1c56a0df70be38676af
SHA256

8532bf50ac30f08e5b244394ec73c67f1580a8c10f7c5b54d09e0274c9bcc108
SHA512

a677165f66d294d0b30effdd7f580694e5c2402c6418910b3d6acd6b94dba533f55937eef887a262d2d766b14ad8c0c503b88b27dc5a64c31b36718fc0cf8527
SSDEEP

3072:wvGpoAzPMavU7nI/QnHrJDTEgtdNFp9NfhZhJr:xogUAQLJfdDNJZhJr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebb57183b70b750ea3b7d254df1f1111_JaffaCakes118

Files

ebb57183b70b750ea3b7d254df1f1111_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ