4f40f4256b7a68bdb5df2523540e12c0_JaffaCakes118 | Triage

Sharing

General

Target

4f40f4256b7a68bdb5df2523540e12c0_JaffaCakes118
Size

243KB
MD5

4f40f4256b7a68bdb5df2523540e12c0
SHA1

35a9474fc7643975fade3ac6aeccf7f002dadb86
SHA256

03a2fe8644f7ed7184db7ae7119ec5342a07074b1751645328836446aae97c7b
SHA512

a7fab3c8fa935fa42c47239d9c8a5078d5cd149da8e6edd756333eb9c8070637363b989eae8e21f397a05d548d1affd6b2f7bdca9e841acce796e46ac7284879
SSDEEP

6144:w88sESRDaFQKHRzO2XQuhmv0nWIY2t1u2PgzA+2QWJ:v8wopO2XQuUv0nWIY2t1u2PgzA+2QWJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f40f4256b7a68bdb5df2523540e12c0_JaffaCakes118

Files

4f40f4256b7a68bdb5df2523540e12c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Munch Loader.pdb

Imports

mscoree

_CorExeMain

Sections

M~M,zxw
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ