e05287ee93596c2fb953ba382e355603_JaffaCakes118 | Triage

Sharing

General

Target

e05287ee93596c2fb953ba382e355603_JaffaCakes118
Size

448KB
MD5

e05287ee93596c2fb953ba382e355603
SHA1

eba1220da5124e6a4e8d4281aae996d212aeae38
SHA256

44f45c864b8c76ab8968ee7d6806789eee2ebb74af4d0e69e1967712ed42083a
SHA512

10518f65054574f42e458f63ec9d92d76cde5a8fd1e0a1e87070518a381e79d7b8bf7b232ee130b24a84bf2105dc7878bd0f597b2d459d15a2e4429d2a7915c9
SSDEEP

12288:Gzxf89A9V8KiJSf8lhZRlf5Ok5P+WKFb:Cxf89AH8K6G0Fkk5P+W4b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e05287ee93596c2fb953ba382e355603_JaffaCakes118

Files

e05287ee93596c2fb953ba382e355603_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 403KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ