16e55ff4bcfa09e92f6f5eb907935e35_JaffaCakes118 | Triage

Sharing

General

Target

16e55ff4bcfa09e92f6f5eb907935e35_JaffaCakes118
Size

1.0MB
MD5

16e55ff4bcfa09e92f6f5eb907935e35
SHA1

0e1d213c1cd2c2e9c56ed67a5bab9a0a4df2b371
SHA256

838eb8a75fb50b9591f7be47a2f0ad3f89aac80bf91604cd96fb0fa3a558a098
SHA512

43e304e3b75d1e7185211b6b1c94b8b310275b74fb504a382382c83e282e7f7db31479a27c6aa47553c39a8ba08e29e4df9aa45bf1fce9296d1fba5da52c27ae
SSDEEP

24576:xEGaHuTpegXTAScsuz3WMdcDLV7r/v59:iiTk0cDMR7rv5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
16e55ff4bcfa09e92f6f5eb907935e35_JaffaCakes118

Files

16e55ff4bcfa09e92f6f5eb907935e35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 946KB - Virtual size: 946KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ