ecef441f0e700703b1a88cd2fd192512_JaffaCakes118 | Triage

Sharing

General

Target

ecef441f0e700703b1a88cd2fd192512_JaffaCakes118
Size

824KB
MD5

ecef441f0e700703b1a88cd2fd192512
SHA1

e2f3d461365f922a6b8a14bdd1a102b87837970f
SHA256

93bb5f030d08e039615e90c975dac78b459a8a93cd3cebc3c3fa08ff8d665a60
SHA512

18cd871b0b381cf06ab13372ed15b56f07fea622ca8602c8d791c00567ee27a6bc70ab5b1b5d7ffcf4fec9bed84fd3796da03b6decf3c692f3c09a181eb70d9e
SSDEEP

12288:nF8gJHEMc9OrRcFRhnjIO6aHdNRKDJc8JnugVOGQ7U+cBNGBfA:dHaMVcRj/ZBG9nkGYKt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecef441f0e700703b1a88cd2fd192512_JaffaCakes118

Files

ecef441f0e700703b1a88cd2fd192512_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 644KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ