cea0ff40beb91736ba2442b69237667b_JaffaCakes118 | Triage

Sharing

General

Target

cea0ff40beb91736ba2442b69237667b_JaffaCakes118
Size

926KB
MD5

cea0ff40beb91736ba2442b69237667b
SHA1

a43ca7c487363b53158573b25cc29888763cc626
SHA256

96a973f6ec1b985ad4224870800fbbe369e5838dbc994c16d7ce8f8c3b30e8a1
SHA512

3a1298c556a36a27e8e48540abea44728ce2b06d7f41a0c8478161078d6a0773728013acce007a23ca433bbbef0e1160f857e1618a4b16fda9c8b5199d936397
SSDEEP

24576:0vVGhnqrpqUruyeG0ZN3DIeriQv0XwQjGp:PJ48UKfGw1DniQveg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cea0ff40beb91736ba2442b69237667b_JaffaCakes118

Files

cea0ff40beb91736ba2442b69237667b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 795KB - Virtual size: 795KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ