ebddf4bb0f374a43a7da0b25a9a95794_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebddf4bb0f374a43a7da0b25a9a95794_JaffaCakes118
Size

7.7MB
MD5

ebddf4bb0f374a43a7da0b25a9a95794
SHA1

03eabae1b275ea587b6ccd31fcf10e9edc24a393
SHA256

ccba11cabcad49682fa77b2d810c5bed4b3c9f75003d70e220a22c1e70c12049
SHA512

69777529618af99f65e2ed53192357d6d3a4a0f8ff45fe84b0849262d1c1f0a0baac186c2be8f93cb5fbe626d237d254003fb3f23e7bbc8d41a0c4f243f000db
SSDEEP

98304:nZFEgVmK1CecSJn08e76/MJkWeYBMzJlwCjq/UceogBWxogWJWMBYP4ea3asT7:nkF402/p10MbwSqd9gBWigL8ysn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebddf4bb0f374a43a7da0b25a9a95794_JaffaCakes118

Files

ebddf4bb0f374a43a7da0b25a9a95794_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.6MB - Virtual size: 7.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ