67bd2acf99eb2cdd349082dbeced7b88_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67bd2acf99eb2cdd349082dbeced7b88_JaffaCakes118
Size

2.0MB
MD5

67bd2acf99eb2cdd349082dbeced7b88
SHA1

98e5a1d36e4c9ed3b6e5e91c4ecce1e27113d228
SHA256

7f6cfae4b1ed88ccf2fc38ba73b5bf0c577cfbcf64f091b81b5d4025e71a9cd5
SHA512

3d4988f999c2cbf53a36f14a5748097a8f591b619a61cfd842300406425a9c1ba189d101f17743598691cf5ca03b473526f2d5363f641b0ee0f0af8317ad37ee
SSDEEP

12288:fNtZA/mhdKOpDBdUn7vPtdfzNTwYO7lVrMTxXVDcroF/TL0OAMIJm3nAUZy8W/N+:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67bd2acf99eb2cdd349082dbeced7b88_JaffaCakes118

Files

67bd2acf99eb2cdd349082dbeced7b88_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ