aa1e142242b501a87a234742d092cf64_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa1e142242b501a87a234742d092cf64_JaffaCakes118
Size

26.4MB
MD5

aa1e142242b501a87a234742d092cf64
SHA1

825a40931f7ed8e46d0e28fbeb053526dad6e3cc
SHA256

6806da106ed2e83ca54eab96f2998f8e8e2a148500d6c3c3c5345a0f298084f4
SHA512

5ad9a25b9779474081d859f4b670cb1c245c5856ffa1d0177e248d0ee51ce3f7d07d53b70dce4d9eab44b09b6bb3cccb52526ca91e9b1e267ce9e36ec867a21f
SSDEEP

393216:WMG+91tZUxTqB/CCwYDN9sgjT9InRvvHm95fK:WatZUxTC3sO9ovHm95f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa1e142242b501a87a234742d092cf64_JaffaCakes118

Files

aa1e142242b501a87a234742d092cf64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 26.4MB - Virtual size: 26.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ