b640ae5723b4949a94ba032625a37cae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b640ae5723b4949a94ba032625a37cae_JaffaCakes118
Size

5.4MB
MD5

b640ae5723b4949a94ba032625a37cae
SHA1

495ab16f703ee8bcb0da5c887cff455aed73e08a
SHA256

5fdb9c28a73701968a2298efe55b6bd004dc8faa25dacfb809fe1df6481fe17e
SHA512

e4440f40c5f010d3468eed513da883e1475f3c0254e8af63d94897554eb95776b22458c8a36352dbc0b9ea22dc8e09d9b3c66367d2dda04df2e31b66fc41298e
SSDEEP

98304:KywB47poyw1hqrvywWkuA2ywkz4a5UwDdhywjnoywHywfxywkcywJywNVyw2OywK:KywBGqyw1Uywj52ywkz4a5JDdhywMywa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b640ae5723b4949a94ba032625a37cae_JaffaCakes118

Files

b640ae5723b4949a94ba032625a37cae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ