74bab76984e9561e46305c277cf5b12d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74bab76984e9561e46305c277cf5b12d_JaffaCakes118
Size

2.4MB
MD5

74bab76984e9561e46305c277cf5b12d
SHA1

87717938bad3bf23bd07bae082d6396f51103a89
SHA256

34732e1c8c17048fa324521dd87a4a43889df7407fc627aa1b5fdfb2bc909961
SHA512

7e5a3b500961826de49edac49bb78d71445e3caa2b6b35c90ab5879c787174d578e59ce1b69dd11c9205032307421ca5a80b2eb3764e8c61fe92b701e5ab11a4
SSDEEP

12288:tDLBJ/mz6twQ1fdXkTVDwOfbBAu55uADADADADADADADADADADADADADADADADAK:tHBJ3aQ1fdXuuQH4Yy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74bab76984e9561e46305c277cf5b12d_JaffaCakes118

Files

74bab76984e9561e46305c277cf5b12d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

8y"jOLS
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ