8e9109a513f9a035068f28d769bb711b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e9109a513f9a035068f28d769bb711b_JaffaCakes118
Size

4.6MB
MD5

8e9109a513f9a035068f28d769bb711b
SHA1

ae326e90537bfc89d31e936de873ef1afe6a2c96
SHA256

2a863b80ffff1219d7d7682aeb6f1fe50457cc26e219ea010203a5dddc9d6c23
SHA512

9b95c46ef914d0d08651564f8a9e2b370b6ff3878621e1ec6f9cc515ff76026922160255041093fef8942a88ef1dc40ffcdd6bca7b3c36600a773cb7eee45e75
SSDEEP

98304:t0CnwY8JrkvkjAQMcLk3M1VxVe7hwme1iC7bc31sJfYCPmHi/Q8XeG7:edJrkvkjAncg4V+1M7431sJzPE8XeG7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e9109a513f9a035068f28d769bb711b_JaffaCakes118

Files

8e9109a513f9a035068f28d769bb711b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ