ef1226e8a36656d81cdf1e22465f23f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef1226e8a36656d81cdf1e22465f23f6_JaffaCakes118
Size

836KB
MD5

ef1226e8a36656d81cdf1e22465f23f6
SHA1

ca5312892dd8ee7b4a1d990d713d4fdd0079621e
SHA256

0247f4f22d26c96bf21ebb42d2bd3d21b40056264275a244278f140e5f6129ca
SHA512

a0b87f149aca6c0146914bcd8ed739f33bc1a828cc230405b0c35cbd1df67b11bf40a9efd4ac945038387fb71c416895df2594658a776b2bc5138f58723fbca8
SSDEEP

12288:jSVwrAd29DBMczJqoFbiyR6qo/aWaMnv9rPxxBhRVnY2z4S73cM:OmHJqcTULxxDRt4S7MM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef1226e8a36656d81cdf1e22465f23f6_JaffaCakes118

Files

ef1226e8a36656d81cdf1e22465f23f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 357KB - Virtual size: 357KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ