717ec39fbff581ace1aeb90e5a889d54_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

717ec39fbff581ace1aeb90e5a889d54_JaffaCakes118
Size

530KB
MD5

717ec39fbff581ace1aeb90e5a889d54
SHA1

5b9f3027d6f30941cc09dc833fca0fe514e631a8
SHA256

de5470d4c2904de6356dae1bdb4c2808ceafde9ef95fb190a5d05bd0a31132d7
SHA512

89b19e9411b97dbef05648ddd6707f1f5ba76a9657203168ba2981dcb105d4a066d5c2fb6a4f887e32e1f1838723befc9f300e14de6a3b060037a90455da7e46
SSDEEP

12288:ocFZ9cAJRbDjFDINmsBF5W80h8uScEfIPpTv:xzT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
717ec39fbff581ace1aeb90e5a889d54_JaffaCakes118

Files

717ec39fbff581ace1aeb90e5a889d54_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

NBLG.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ