8bb3e0ee9828c69a97a203d4e84098a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bb3e0ee9828c69a97a203d4e84098a3_JaffaCakes118
Size

12.8MB
MD5

8bb3e0ee9828c69a97a203d4e84098a3
SHA1

46f465a6f52186062ee3e04c433c789d4b4e1a31
SHA256

5485c044c3867571ca3e4eefbe5b377bfa2cd6c04fcbdbeda82bf450dc3330db
SHA512

68924756208db27548bc2249ea1edfbaace20fc3f4b97bca483b7a585da7d291d3ad8cbcb5305190a6a772bb57d47fb6ed6b69728a502fbdd4a2af14acb3db2d
SSDEEP

393216:40Bv74nYjYjaEBS/k+/aBv74nYjYjaEBS/k+B8t41D:lDlEjaGuxoDlEjaGuxD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bb3e0ee9828c69a97a203d4e84098a3_JaffaCakes118

Files

8bb3e0ee9828c69a97a203d4e84098a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12.8MB - Virtual size: 12.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ