a7a3d7700d42e8804a59cb11ae052066_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7a3d7700d42e8804a59cb11ae052066_JaffaCakes118
Size

4.0MB
MD5

a7a3d7700d42e8804a59cb11ae052066
SHA1

3a1111594e0b794bf6119ea9a80cec2d8a4b69bf
SHA256

bf6a2bc092069b0eb0a5ddc95f6385085ddc200c522fe0715b2c3e013c099397
SHA512

fd0beff55c70c8c09c954605c4c8ac99a42b28eabe5b989a3a0686304a26edc399ca0a0d3731bf1c0939bd8fc78df1e881979aca4668afc2d4f1e206e82f2f5f
SSDEEP

49152:xnVMyZ6CoOKcx/rIDlHFsSOyIKqN5ZEq5dSAbfp9+mdsmWXtu6so9sjs:xnVMwoHcx/rsHOyIKqN5P5dvMQWXo+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7a3d7700d42e8804a59cb11ae052066_JaffaCakes118

Files

a7a3d7700d42e8804a59cb11ae052066_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

iKingCode_BypassHello.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 207KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ