8a071954a98fdecfd695a42cda7afb67_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a071954a98fdecfd695a42cda7afb67_JaffaCakes118
Size

879KB
MD5

8a071954a98fdecfd695a42cda7afb67
SHA1

64cdb4ce7fa9ba1137c44377a626619f536ecb6b
SHA256

c6387202cd0eb1ac041ec9a72c8b0c80f5a191b4be8da1d60164d90c1cab4730
SHA512

054baa1c4f3f542c2531487027b847d82a9de55b23a372648113070974af3be2ab99936e3fec5ad8204391f9758593da5062a52012de02278c4479616a8b7f6b
SSDEEP

24576:oLZbAGDTjzLzr6z1svJpGAJd7skaE2egwJcjMdS9kU:6E6jzjkmvfRsLZIc9k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a071954a98fdecfd695a42cda7afb67_JaffaCakes118

Files

8a071954a98fdecfd695a42cda7afb67_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

BopBase.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 874KB - Virtual size: 873KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ