18764f36686a678263c72d2451f636ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18764f36686a678263c72d2451f636ef_JaffaCakes118
Size

5KB
MD5

18764f36686a678263c72d2451f636ef
SHA1

9cb395fe338126df6af3ee30453bef881f737148
SHA256

8ef3a0b2620fff9b616db2e7e77e3a07137748d9c05cb26d6dd946983b06b849
SHA512

11a43c265693eaf2d64301bd9fdb0c3e95620ad954d98b7a2d1de7437d701a34328e1035489bce8be0497933fb25cb5096bcdbff063103effac8aa706a234362
SSDEEP

96:Hgy+uka+0p6PxdYfhuj4OyZ3ARadxF+phSKl8Q9QEJF5/E1CyvR:DHkop6PxlYlA8zgS0Qg/E9p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18764f36686a678263c72d2451f636ef_JaffaCakes118

Files

18764f36686a678263c72d2451f636ef_JaffaCakes118
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Elevated_MpMiniSigStub.pdb

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 290KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ