a9e8a5df8f5b3bd44970564405c479f2_JaffaCakes118 | Triage

Sharing

General

Target

a9e8a5df8f5b3bd44970564405c479f2_JaffaCakes118
Size

392KB
MD5

a9e8a5df8f5b3bd44970564405c479f2
SHA1

950c80b230201590b8ca637c3d45f0fba5eca72a
SHA256

24a74c858b9e16322e848c84a2e9e915f493da9580b5f4653eb236c836484738
SHA512

6f3b289425f7f97b1e512c0b297f1720a637f58f7ae85eb0ba6d40629007425e350356a22f356d8756f07af610c8764ac6d54733002292634aee39b46f89ab41
SSDEEP

6144:jkLW60igYbJJL7XJAnY7mRoJfeCvDAP/lYHdzQ:wLW60ixFJHX+nOcmfeWc+u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
a9e8a5df8f5b3bd44970564405c479f2_JaffaCakes118

Files

a9e8a5df8f5b3bd44970564405c479f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 387KB - Virtual size: 386KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ