0e40de0bd6a522356dc785f4af59d515_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e40de0bd6a522356dc785f4af59d515_JaffaCakes118
Size

516KB
MD5

0e40de0bd6a522356dc785f4af59d515
SHA1

b5cf58ca7c3d3501193d137d4c6da537858cd6b4
SHA256

4293739fcc407933184aa7e2ea98e0a4205401814bf8c5725a335ebf1fc8e977
SHA512

4a9f28af1d2f09588201c3d0526ded4e805bf39a12b8eab294838aba9d02fed551c0b1db321e13620918cbbc21420f797dc0382eb476ee741a0c3790aebe89e5
SSDEEP

12288:VeD0BDV4Jz0k39DNdpfxdwzbfMWMrnxLQj:Vr80E1pfUHKnF2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e40de0bd6a522356dc785f4af59d515_JaffaCakes118

Files

0e40de0bd6a522356dc785f4af59d515_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 504KB - Virtual size: 501KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ