89681e44a4022ed40855314fd7a0b1ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89681e44a4022ed40855314fd7a0b1ae_JaffaCakes118
Size

534KB
MD5

89681e44a4022ed40855314fd7a0b1ae
SHA1

d0832179bd48ad516c66e07cec9588d1008f482c
SHA256

f6a1a11a56ec8fda9ceb848b58b5248f2379052d59708a6689f5111f52f49837
SHA512

71279a9cbbe5f06027ed37b137431216a22c55bd54324379436c4c78d3c534d9f5930008a49b2004ea9a1de99b072ee211a8e298cb821692cc4380d694e4a33a
SSDEEP

12288:Y9xcG1D5HHfJm2emv0G9CJxENrYl08Z6M5qlfJtPiJe4pbiuo1lX62D09f1O3ax8:yxcG1D5HHfJm2emv0G9CJxENrYl08Z6Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89681e44a4022ed40855314fd7a0b1ae_JaffaCakes118

Files

89681e44a4022ed40855314fd7a0b1ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 517KB - Virtual size: 517KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ