50ae08b3811fd02ea11639fd10fcec90_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50ae08b3811fd02ea11639fd10fcec90_JaffaCakes118
Size

455KB
MD5

50ae08b3811fd02ea11639fd10fcec90
SHA1

b4818074abe1ba075b0f7c74a994936e88aa62e7
SHA256

883938caab6e0cd6e3da4fdc70bfa89b7dcc75ce9131e82cb73afcf83c809e01
SHA512

bf196510eaa152f52e648a6883bcde8c8d5438addaa8cd53efa0a21525b417277b762e0565841533a8747d23f071ad7a2720b7828a7c496154fd2e595789bdcc
SSDEEP

12288:rlLQY/qp5bu9TlLfUTdwq13kouQHXDXl:pgvbuhZUTd1kkXD1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50ae08b3811fd02ea11639fd10fcec90_JaffaCakes118

Files

50ae08b3811fd02ea11639fd10fcec90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 433KB - Virtual size: 433KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ