422504f73b8e1fb47b72564a8677f699_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

422504f73b8e1fb47b72564a8677f699_JaffaCakes118
Size

1.5MB
MD5

422504f73b8e1fb47b72564a8677f699
SHA1

68ee5c75c312b6de1979d08768df82e0afe8446c
SHA256

3024133b389f39f793c6ee4b2dc8030110cd147cb9428f7d9786b0ca4e8f3765
SHA512

5d127fa5cbba0ed39a9b5345beae3c814ea40568a1600ee0c1452615b624ef57aaa2efe07b5a014316ebf2781758748f8136f8d71422d825f051f6fe53764d39
SSDEEP

12288:KbY4o02ZILlGlLDSQZGCIO4ZfiDFN7DGXbzljR4OGj8Bph:SY4TgIL0JdGa40DMHLh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
422504f73b8e1fb47b72564a8677f699_JaffaCakes118

Files

422504f73b8e1fb47b72564a8677f699_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ