448e20b4a21d220b6fe2e3338d434cd5_JaffaCakes118 | Triage

Sharing

General

Target

448e20b4a21d220b6fe2e3338d434cd5_JaffaCakes118
Size

6.8MB
MD5

448e20b4a21d220b6fe2e3338d434cd5
SHA1

553e4d46ac8ecde1ab5fa11ffc58a8168b451a3c
SHA256

311e5fa078aa584754402addb135b20db472578ff033ba02c36c968d63bb9c9f
SHA512

d6198501dcfc39a94472d3c3ec8d4a6fd2a27591ecb6486d541ffefb80d06a44d284e73a3b73632593772947a5b116f485e10dacca3a65ba885accc52b4be664
SSDEEP

196608:p5sgnwfkTgSXHnP89TXn3DbV9HU8yqMay6aw:p5siwGXHPUnDbVZU8yj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
448e20b4a21d220b6fe2e3338d434cd5_JaffaCakes118

Files

448e20b4a21d220b6fe2e3338d434cd5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

?4)c50$
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ