173f880007a6218b60747b51fdb139ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

173f880007a6218b60747b51fdb139ba_JaffaCakes118
Size

70KB
MD5

173f880007a6218b60747b51fdb139ba
SHA1

aacd879991ceb5902679d6a07c71c6962fddc441
SHA256

db1bacf9cf39f7dd406e12009ca6daa412e7c8e165ea714091dbd1bde3d13293
SHA512

c4469f59e7007706c674fa9836806f0352ddee86b4047405d481928fccf0b325836079f5e04979e5c81b5101cb7fe30443b505ee1f521b928fc4fa2b1c79070e
SSDEEP

768:/vd8bmj2d0QTQPt+0ec7AqxpYheRpgfD+YMt39SpeVbCyUk3tYn2GDfssXMa:Hd8fV0PtDHAqZpsKYQA4VbCNk90DUHa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
173f880007a6218b60747b51fdb139ba_JaffaCakes118

Files

173f880007a6218b60747b51fdb139ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Stager.Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ