624cc456a092da6c9e6743ae6c8e23ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

624cc456a092da6c9e6743ae6c8e23ae_JaffaCakes118
Size

1.5MB
MD5

624cc456a092da6c9e6743ae6c8e23ae
SHA1

dce5d9d408802275eed56373aef0fd49053984e2
SHA256

26e8e4ec167b6ab37ae7070e7dfccc0182e5987c914e55e043c5704dd8a36322
SHA512

3e480419934d2c03e7499a9f79118638b6a8dd91ed744c08a5040c75a67ecd1d26cd64f6fba7070fcb32d2936991fd85e373fccd106d2dada9dbc599fbccbb11
SSDEEP

12288:anjVXpKgCPfJ5joXK2LUxv7VNdr1GI1xc8a+FwEwCGgRhde12kVSC4jkS695Dn19:YCHJ57xpLpLc8mEwCxL3kz9pn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
624cc456a092da6c9e6743ae6c8e23ae_JaffaCakes118

Files

624cc456a092da6c9e6743ae6c8e23ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ