8ed7a017019ddb3974773f00201ce7ff_JaffaCakes118 | Triage

Sharing

General

Target

8ed7a017019ddb3974773f00201ce7ff_JaffaCakes118
Size

898KB
MD5

8ed7a017019ddb3974773f00201ce7ff
SHA1

f16859ce1b234c227839c5a281657fcac3fca32b
SHA256

d1f6a233ac2f32b294aab2fbab59ffea7747cbe238fc12efa7e8d4bf064ffea9
SHA512

7d60ca32f12d5c73772f10f7bf614547db3613fcb0626af2583dd3038b983e9a69fce6f31cd02649e3cb9f4c97d8d122868037b97240ff17af264b70e211d49c
SSDEEP

12288:hi7dSJNIHK7z56ObA/a76A0dhj5L49CZ8SO29nZeMMXV1:91T76dlU9dJYMpF1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
8ed7a017019ddb3974773f00201ce7ff_JaffaCakes118

Files

8ed7a017019ddb3974773f00201ce7ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 895KB - Virtual size: 895KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ