48d2d988765ae919b06a623b0a1f1f0e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48d2d988765ae919b06a623b0a1f1f0e_JaffaCakes118
Size

289KB
MD5

48d2d988765ae919b06a623b0a1f1f0e
SHA1

36bb5a0511128702ab974bc1af712008c9843cbe
SHA256

5ce6d1fc2e4465fa68c19d93ea2ebaaf5bd24dd139f6a8ecfa4c1d95076a9a34
SHA512

1838b94944cd3d0dcfb86027fadb9fe17e1302763a3838f12c06c6397f82373bf5aecc380a5fd68b46930e7f273f843d8d2a2c4e3a61f737795605b356c2d4e3
SSDEEP

3072:TO4fxQth4dPKcAx1nJP3G9PBi9dShE6upN54gyUP3GmFni8Bi9d/hE6upN54gyU8:ppQA21D6uQkni+6uQkni+6uQkni

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48d2d988765ae919b06a623b0a1f1f0e_JaffaCakes118

Files

48d2d988765ae919b06a623b0a1f1f0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ