74ece895638700c26484577db45712b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74ece895638700c26484577db45712b8_JaffaCakes118
Size

325KB
MD5

74ece895638700c26484577db45712b8
SHA1

7dead62222517a0f44948e501aaceae9268b14e4
SHA256

f2e51933a3a21d0e3ab304892d703a96205d07503ed2be9cc7f4cfa43484b756
SHA512

f9f4f2a794fdaf7f41eb984afabd4d029934f5f2fdb873158bd900a88df0224a256022e31f1441943eb6109460d40f6d3d072ac03a37bba6a8f827a166e12b82
SSDEEP

6144:asU4efqVHBhUsz0jOpkIJU0iaq43MjO9V3Hcq1XFZq:VrfVHB6sz0jO+TRK3sqc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74ece895638700c26484577db45712b8_JaffaCakes118

Files

74ece895638700c26484577db45712b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

M*UC=A
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ