ecffc6b5d33f3c4cb6e583dc453d1f40_JaffaCakes118 | Triage

Sharing

General

Target

ecffc6b5d33f3c4cb6e583dc453d1f40_JaffaCakes118
Size

564KB
MD5

ecffc6b5d33f3c4cb6e583dc453d1f40
SHA1

06923b8c2adc2b5865ea4a8f8923e40274c650dc
SHA256

65f814d425b7ee87879f36e26f9de1442a5c37b064fc47032e256373f45491b6
SHA512

9a4de932cd28304c02b487b07699a0eeeb9c227941dfc0ca79cd79b97bf0b886c2e32d39d2e775c0c4bc57ffcaa7ddf0c82cb231ff6f8b24722f8cec024a78e2
SSDEEP

12288:YZav2zv1gQFV2A8D3g3v4PTVioXLUKmhCFcn2JnzGj:M92QauuTgULVRHzG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecffc6b5d33f3c4cb6e583dc453d1f40_JaffaCakes118

Files

ecffc6b5d33f3c4cb6e583dc453d1f40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 561KB - Virtual size: 561KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ