8019081e174177d53613ad51ca250a0d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8019081e174177d53613ad51ca250a0d_JaffaCakes118
Size

747KB
MD5

8019081e174177d53613ad51ca250a0d
SHA1

08ac10f1ac0916c363bb16a8cc62c3cb4c052dc7
SHA256

e4ba07602ef8fd6cc6d9d417ea69fef5de31f3b0edc904851db5d3bb0355f32b
SHA512

1b350d91ccf2007b131e2941ec44b007f67569a8e43a6a9478a0a781417c5513c788e9ab8cafcbdfd68d33f4d04b6a5f50db94579c13051a05e99717dd865691
SSDEEP

12288:KvsGjfxz+CIRTMhyDi9bImUL5uNMxaOBT1c9ZOtQYKJcqfDu3QwsiluQAtiTd3og:20DTMmU2w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8019081e174177d53613ad51ca250a0d_JaffaCakes118

Files

8019081e174177d53613ad51ca250a0d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

QuestEditor.pdb

Imports

mscoree

_CorExeMain

Sections

Yw9i%nU{
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ