JaffaCakes118_e22b8024f4fb0c06114745e0271f1ae0 | Triage

Sharing

General

Target

JaffaCakes118_e22b8024f4fb0c06114745e0271f1ae0
Size

490KB
MD5

e22b8024f4fb0c06114745e0271f1ae0
SHA1

e3c7de75f745bdaaf9e40ecfbbade2a237750acd
SHA256

513172951ac03e30860d2450220a2e3369a503cd0e935a2a7128c0e86927832c
SHA512

1d1409f4518b0d6880b42318f28872b5082d224debe91825e91ce7b312e0b74ddf62af9376258d7cafda4d2c6bc58320ec11bb2bedd755345fba7cc68f8adf44
SSDEEP

12288:sMXNQHSSa7soZbai1U5q97TdfPOAtp1sra3cw:TXCSdai1U5Qfxp1yw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_e22b8024f4fb0c06114745e0271f1ae0

Files

JaffaCakes118_e22b8024f4fb0c06114745e0271f1ae0
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

IStoreBindingResultBoundVersi.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 486KB - Virtual size: 486KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ