efc5d47f6d5aa4dbd22cd109aa13ac30_JaffaCakes118 | Triage

Sharing

General

Target

efc5d47f6d5aa4dbd22cd109aa13ac30_JaffaCakes118
Size

7.6MB
MD5

efc5d47f6d5aa4dbd22cd109aa13ac30
SHA1

6427617947cca1dc78c5091dcb2c051ab8d5b949
SHA256

deb4b809f9360df97d5991701bb4ce8d6f0a2b929e1459ea509299b3bfa65d62
SHA512

0bf945e9f5f84ed82df9d6c160fb495b0f0e121f86e03ee3cd7acad1e0059d914fffde6ea8e3322015aa184792bbd0f9e9f85697ef9a1d06e172b693f839af29
SSDEEP

196608:wgtgIQ2Y1hyRrWcIaVrtz8cUthPflZsynfr:LJQp1hyRNhVrtzBU7P3nf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efc5d47f6d5aa4dbd22cd109aa13ac30_JaffaCakes118

Files

efc5d47f6d5aa4dbd22cd109aa13ac30_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.6MB - Virtual size: 7.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ