899e155074387ff34c3f581bacc86bbd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

899e155074387ff34c3f581bacc86bbd_JaffaCakes118
Size

2.3MB
MD5

899e155074387ff34c3f581bacc86bbd
SHA1

52ac67184ab2f8b5f6c89a18d84955117de6bf7f
SHA256

769a5cca31290c6f6daccfba9a9f931954033784c68fdf16bbde2cf10bed3c93
SHA512

61921cf555400cd87c4e68c6facade34a666087a4a541d426b5cf8f86937925b12dfd8d514c7d3260b5320f69df3d294cb8e7970ad6adf5baeebd3629c995629
SSDEEP

49152:bHIW9D0nO4YcD8PJA+ERCTh7crUyOBrJCGglitNpBU:Vp6RoPJAbCThA/OtJr7pO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
899e155074387ff34c3f581bacc86bbd_JaffaCakes118

Files

899e155074387ff34c3f581bacc86bbd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ