48f9735d7c217c78d1b86b45cad3fb38_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48f9735d7c217c78d1b86b45cad3fb38_JaffaCakes118
Size

601KB
MD5

48f9735d7c217c78d1b86b45cad3fb38
SHA1

d58c8ad8984113478a6dc0941c31e5e7e79c750a
SHA256

6b1a7c21881ba50d635ac69a148df00d1f63646666baada63bd121e8c29c7045
SHA512

8a4f9ab27dc37e38fde89fd01b968b093aa6a0c18a546176fbea82f9783372ea1b3e302b31520dc7041a1782c842c436117304a02cb3712c7b44fd29c0d47b36
SSDEEP

6144:bNM/neNoQmichpefC4DxO83sKfl8dOzf4LBdpylFx1nEvfaW0B8P7NDMzkx3uB5:WT+rVsKfl8bNX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48f9735d7c217c78d1b86b45cad3fb38_JaffaCakes118

Files

48f9735d7c217c78d1b86b45cad3fb38_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ