214052c9479d3b74373c2f1cde386b66_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

214052c9479d3b74373c2f1cde386b66_JaffaCakes118
Size

42KB
MD5

214052c9479d3b74373c2f1cde386b66
SHA1

6d02257d2c83d97626467d092699c8fd9e51ae34
SHA256

2c89866c18af97ee77771dff7321803ca2259502d7492d73ee91321423ab2db5
SHA512

bea8dd8ad1b88328679b72b2926763c53ab1afe8480031ba245b5b687c6e224c8ee9e2484dcaf5a48f4f0b8a563d9e33bb1b42db8ada85703fa0f14ea683819e
SSDEEP

768:V5qFAWrT3BlcMESu9qLWcqrPov+gADhEUpPpbD45+rsyP:V5qFA4VSr89qUv+geyYj5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
214052c9479d3b74373c2f1cde386b66_JaffaCakes118

Files

214052c9479d3b74373c2f1cde386b66_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

%+BFQ
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ