83b6d26f1b580d5252be2d310dd02e14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83b6d26f1b580d5252be2d310dd02e14_JaffaCakes118
Size

1.5MB
MD5

83b6d26f1b580d5252be2d310dd02e14
SHA1

94ffd47ee82845d7fad557b25bf02c3594443d54
SHA256

4c44a0f00ff27e80332eee09501f4aab4f5e4854f2b8c97e8e41b0009fe1439b
SHA512

cc2ef14a2fcb0d75be94e3224e67e459d66a3f86e31165727edda3960110e7c603a2307d86eb34cf1340d2774872d1f059e01005d117b204bd7f29b66d256290
SSDEEP

24576:x3aaLI7p++cmbOABSmQgQ5qYrjecNJVcGuuCZKkMKCUwSgF1DT6zQ9:daacP59Qg9gqc/VcGuuyKktW1Df9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83b6d26f1b580d5252be2d310dd02e14_JaffaCakes118

Files

83b6d26f1b580d5252be2d310dd02e14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ