efb9dc991744b43df95eb45a1ec8db49_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efb9dc991744b43df95eb45a1ec8db49_JaffaCakes118
Size

2.5MB
MD5

efb9dc991744b43df95eb45a1ec8db49
SHA1

3d9eb6212423c27fdf2c6b246ce8a00526d2d6cc
SHA256

d18ee590de98b3955a44d5b8c06c9b35362c32a95d122592a78e374b9ef9f964
SHA512

e24aaddd0147d6ca5231b779fd343e0efa62a05495b2feeb2b115fe699d33384ade6d1fb00569cd419bc56fb3b6d2d85c4f7a79e43029dc8a144a2c842c810ad
SSDEEP

49152:OvP5kkxIe9asY6DwOBfrnvV7UeWtcgHoxL:I/ZjYiwOBpIeWugI1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efb9dc991744b43df95eb45a1ec8db49_JaffaCakes118

Files

efb9dc991744b43df95eb45a1ec8db49_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 140KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ