ebee8cf08372f8a744b657c79908dfd3_JaffaCakes118 | Triage

Sharing

General

Target

ebee8cf08372f8a744b657c79908dfd3_JaffaCakes118
Size

436KB
MD5

ebee8cf08372f8a744b657c79908dfd3
SHA1

7b3c2232a31cea5833eac35bed80884feb90fe64
SHA256

1880a6472c17c1641b06f20639fd5fff35e4cf70d908d13ceb7a76943d19c84b
SHA512

a993e37169235458c7f289159b3d6bec4a46b6c6b80b51eb3d5d23e93515a25875d2940b90d03809478f829ab7792466ca8780cc29ac08594d4f8a4693b67cc7
SSDEEP

12288:F991UpQQquG//Ef6BFVDINcsDNnnoemVQXYU:F9UOV/EfatEcsJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebee8cf08372f8a744b657c79908dfd3_JaffaCakes118

Files

ebee8cf08372f8a744b657c79908dfd3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 404KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ