648d7df6ad3509529ef9ff0c7fa210ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

648d7df6ad3509529ef9ff0c7fa210ba_JaffaCakes118
Size

3.6MB
MD5

648d7df6ad3509529ef9ff0c7fa210ba
SHA1

f6e0fd154f5c68d1c7941f4373355d6895a362bb
SHA256

927cb64af4bcbf920af6ac63a3e1ef2ea58342d9f142fb0ef4567a98926da8f1
SHA512

57a44153a849dc4a16e74e6d853b44ec3d002d3b3de7cd7dbf2649df0d85c7907fa12703eaa48561a67892de914f7d0a0e7210d0ffcda41ea0e6a7e310dca1f2
SSDEEP

49152:NUf4KSf4KN1Caf4Kr9hGbJwLkiZjcYvSRq6+IKr5XsqouGVnfuT:NUA/AcAc9OuQRY0W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
648d7df6ad3509529ef9ff0c7fa210ba_JaffaCakes118

Files

648d7df6ad3509529ef9ff0c7fa210ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ