JaffaCakes118_9e6eee535d7b2c2f40c5a5478fa5810d | Triage

Sharing

General

Target

JaffaCakes118_9e6eee535d7b2c2f40c5a5478fa5810d
Size

104KB
MD5

9e6eee535d7b2c2f40c5a5478fa5810d
SHA1

96514e92d1224ee35317fc69f64f6147c93a870c
SHA256

4ef128a8ae0eb9a7ab045791ddcfd834f173ad5cb98dd51c9cc84fb99f8cbef2
SHA512

b2e0db6af410f07d263d5d448b8a39b9f0b1111cbdc6285a23983edf91e15d2ad27f466abbc78ab6714d61e32ceb7d8edb4db4ecb783400ea34ba22cbe149276
SSDEEP

3072:570QJgokhjJOB5bCRLq2xvwoHmrlNuXQgi2VK:yQJgomGlIq2VfGrbuXJV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_9e6eee535d7b2c2f40c5a5478fa5810d

Files

JaffaCakes118_9e6eee535d7b2c2f40c5a5478fa5810d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ