eec6cb93dfd30ffacb39eaa1fa18fa14_JaffaCakes118 | Triage

Sharing

General

Target

eec6cb93dfd30ffacb39eaa1fa18fa14_JaffaCakes118
Size

579KB
MD5

eec6cb93dfd30ffacb39eaa1fa18fa14
SHA1

01ea1384577a2c89e26ff7b240f30486bb22d323
SHA256

3cd3f84f0eff128eef8a4296e429c128632f42e23dc61964a7a3d9f3146cadde
SHA512

39e2b32d50b59b95a3d2b8e29ee5fadfe2d06b3c82d1ab088a434f780fd634ebe2803d02e3085693aaf80287fab73f2d7c1908347f96cec0c08edc32f0b121a9
SSDEEP

12288:RW2Ej2Pqnr2tavzhxLhFLtrfnuJr05c6kb:RdEjOqn0avhFLtjsrX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eec6cb93dfd30ffacb39eaa1fa18fa14_JaffaCakes118

Files

eec6cb93dfd30ffacb39eaa1fa18fa14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 577KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ