ef71105eb93854135abead9616cd8368_JaffaCakes118 | Triage

Sharing

General

Target

ef71105eb93854135abead9616cd8368_JaffaCakes118
Size

74KB
MD5

ef71105eb93854135abead9616cd8368
SHA1

bda3a6a64be575e9946efbad306dd6c80c036d71
SHA256

3ca5871b409cebd1d8f13e0c9afdd4f3999272206e0648b2138fbb41cb9cb1bf
SHA512

7a13a6c5192e7321185f19511a9581e90b0f284183fba167a4af0e15afb7f1f52f2d63547f421548c2039cd8ea8ac810ab4f144c560c56d85c19df82b2cdd18f
SSDEEP

1536:07algoWDgtr2ZPdY9eX+DC7PWhtFmGn+NWBeuePdkiw:01Lir2ZPO9W4CDit7YK+1r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef71105eb93854135abead9616cd8368_JaffaCakes118

Files

ef71105eb93854135abead9616cd8368_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ