aec479b1c2c3f47a0fa24c93ca45f602_JaffaCakes118 | Triage

Sharing

General

Target

aec479b1c2c3f47a0fa24c93ca45f602_JaffaCakes118
Size

6KB
MD5

aec479b1c2c3f47a0fa24c93ca45f602
SHA1

639d7940a3436c353f20bfb786326a5d1ecf029a
SHA256

6c98b9d6d3b9680c0f0ad39b3fdfc59cbd45a668041bf2dfdc53ee0bf121fcd9
SHA512

10b2e36708fa675d85cc83af989f77b045da2431207a102052f9a992be3b759bdb7dfd441bfd29115f4cb141e11ad4565c73bde2ae4b1acbbcf74eadcc56dc47
SSDEEP

96:HmZ+uka+0p6PxdYfhuj4OyZ3ARadxF+phSKl8Q9QEJF5/E1CyvdhUq55c:SHkop6PxlYlA8zgS0Qg/E9I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aec479b1c2c3f47a0fa24c93ca45f602_JaffaCakes118

Files

aec479b1c2c3f47a0fa24c93ca45f602_JaffaCakes118
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Elevated_MpMiniSigStub.pdb

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 323KB - Virtual size: 322KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ