ed8ef945d7d259824b4b5590c539c0b6_JaffaCakes118 | Triage

Sharing

General

Target

ed8ef945d7d259824b4b5590c539c0b6_JaffaCakes118
Size

737KB
MD5

ed8ef945d7d259824b4b5590c539c0b6
SHA1

5e2768f9c981e83c4761a849b4b6b19cc1decc61
SHA256

abeb6c60fb8519e50226482c903a270a9d5012370e082f6a60aca96c64ff9cc1
SHA512

b519fd4c992b041cd329a1d6bed9ec3f927aa1279c69eb87ef325023a4a277d426518e08475c1da24a016606a679796bb125273bbd2d10add8be3d9c15749ca6
SSDEEP

12288:jSQYzdnLpsnzBhGxR3PqG073wHGc6uB3XdtgnUPTZ:jSlzdn4Tw3iGEkwuBdKQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed8ef945d7d259824b4b5590c539c0b6_JaffaCakes118

Files

ed8ef945d7d259824b4b5590c539c0b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 700KB - Virtual size: 699KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ