f9b4baa5a1195e6b3c37bb0734269daf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9b4baa5a1195e6b3c37bb0734269daf_JaffaCakes118
Size

712KB
MD5

f9b4baa5a1195e6b3c37bb0734269daf
SHA1

a3ad34a46602fc774050f61751997c3961c119eb
SHA256

132b3b9818a6b93768b0997c010cd15f02e68c63d3b1eeeebd2f3e2ff2544d59
SHA512

dbeb2879457fb4d51e129402dfd4fe7e434c7359bd3008e62cf645bfd59592b4a888a38b9e7f63319dd6eb16e1a37c96823cb38547e526b0fd31469d5be62bf4
SSDEEP

12288:M5mLvxNV0QYGKjmLSvnF1yM47vwaObW7pffM+zMfZzW+42BHI:gaxNV0FGizyM47FDzYm2BI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9b4baa5a1195e6b3c37bb0734269daf_JaffaCakes118

Files

f9b4baa5a1195e6b3c37bb0734269daf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

n'01(
Size: 481KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ