8ad5ec72a5d8631b71ac4c4a1a8f1adf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ad5ec72a5d8631b71ac4c4a1a8f1adf_JaffaCakes118
Size

5.5MB
MD5

8ad5ec72a5d8631b71ac4c4a1a8f1adf
SHA1

d685f7fb93aef15cb3ad2382828ca3e7034aa10c
SHA256

072d3f82ac3cc3cfd593e163b1d3945aebc7bd8198b54bd92e7426b746af7f38
SHA512

e52103f5178c3fbc3b1b3db14202b4e5ee1d412f2ce438a23378afc6442ad72b91fe1eae4cdbbe3b73bc6cb3dd234cd74337bbcea7ce715c14f163ff4b845897
SSDEEP

98304:WVNqzeJvVCDrwKtW+On9RD2ifTEQ0v5qWX3PZi0rIjZgh2ZkuKFqn:WVI6JvVQHOn7T3Qqy3vrumhA1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ad5ec72a5d8631b71ac4c4a1a8f1adf_JaffaCakes118

Files

8ad5ec72a5d8631b71ac4c4a1a8f1adf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

V,Q>!Bh
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 338KB - Virtual size: 338KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ