b5d636da4d5a65743c8d96380fc4a13e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5d636da4d5a65743c8d96380fc4a13e_JaffaCakes118
Size

563KB
MD5

b5d636da4d5a65743c8d96380fc4a13e
SHA1

9f4a739029c8ec93582fc990de89852a692ab96d
SHA256

ddc5135dc09fe1b8f7a358dbc6f74b4804e80e7539a0bef5c6dac6ea470d56a3
SHA512

0b204d8a6c744598b999119e3ea64b8f3d8a743de5355f09ee9453e8fb07d868e29f125b738c33f73cf21884c5016164476d09c14a14d3331035ae4711bda2b8
SSDEEP

12288:J8XpykKJd8GNpVFCkfWe1F8JDmJamFTdI:J8Xpy8o+kfR3BI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5d636da4d5a65743c8d96380fc4a13e_JaffaCakes118

Files

b5d636da4d5a65743c8d96380fc4a13e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 561KB - Virtual size: 560KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ