65d98b1ae62c60ca391a5054b53c32b0_JaffaCakes118 | Triage

Sharing

General

Target

65d98b1ae62c60ca391a5054b53c32b0_JaffaCakes118
Size

274KB
MD5

65d98b1ae62c60ca391a5054b53c32b0
SHA1

2365cf54e9188b7d2ff901719228bdec7b9b0168
SHA256

fcb08d4c7f0ee3c802088ba1c3fbf8b019b85da429a06c1f48280d3b38a9c4ea
SHA512

9b9f408b5f13528ae6963e59f15109ef8b4f246b290f916b65a1ec06543af3e46e2987ce47281c2a7ae444b45443f9f13d43e95fb77cdfc7c394fc19a4471287
SSDEEP

6144:6wfRyCW7yvdCeCN8wBrBxZaJHHQHHHeYATQQQQQQQy0C3:6SQCW7yvdKN8wBrBxZ+YAt0C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
65d98b1ae62c60ca391a5054b53c32b0_JaffaCakes118

Files

65d98b1ae62c60ca391a5054b53c32b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 271KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ