0ec51a3cb5bb4e71a1e4e611afeac1d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ec51a3cb5bb4e71a1e4e611afeac1d0_JaffaCakes118
Size

100KB
MD5

0ec51a3cb5bb4e71a1e4e611afeac1d0
SHA1

9215840a27e12864d2db7dcead7ccfdeaee83d43
SHA256

2b8fa2d543d7f69a7f0115e6be8f2ac36680411da5f041555a3cbc96b1b26896
SHA512

1671c92d6d1500fad12061a24f974cd2db71c10b2b37e5d312611b4ee21bd222f3a00c3bac7bf12ad15c30ec2fefbb645cba5480c0753f84a0f52ebcc2ccd223
SSDEEP

768:lbgxBk06FDMbB9oAgtIPqA/4XhhZFfGA7y8DxcXL2sM:lbUB36+foAgaV4X3rtDxc72D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ec51a3cb5bb4e71a1e4e611afeac1d0_JaffaCakes118

Files

0ec51a3cb5bb4e71a1e4e611afeac1d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ