90c81d886ad70f2a9f43a8192efe6d98_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

90c81d886ad70f2a9f43a8192efe6d98_JaffaCakes118
Size

586KB
MD5

90c81d886ad70f2a9f43a8192efe6d98
SHA1

c245d44aa1f1ad9c26f2f85d36a887f7ce08bca2
SHA256

91a2e117dee15f7654a2577ad9346f6ff856985fe05857f319ace4d3cab899df
SHA512

73820998054ef758a57f854296511dcfc0115d59e68b406002abdcda405eb872e055ff126c19f80242e4b21e80aba4d501a7c8a1c56618d9c3c30930183915b3
SSDEEP

12288:sllllllJBB+fXAwE6J3I4V3wtkGfS0P8SfGaOOmDz2Y0VMxZ0M9:sllllllJBB+vNJ3ISGXGlOm/bsMxx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90c81d886ad70f2a9f43a8192efe6d98_JaffaCakes118

Files

90c81d886ad70f2a9f43a8192efe6d98_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 569KB - Virtual size: 568KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ