da7e5fd9922eaf334884820d3a7c581e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da7e5fd9922eaf334884820d3a7c581e_JaffaCakes118
Size

2.2MB
MD5

da7e5fd9922eaf334884820d3a7c581e
SHA1

54953d8d7423bd4aa9d0e9baf1fe7b7535d0bd21
SHA256

0be7d096a2b3fabf09d331c2f1ab7bbfa71d6a7a1f4e2d874bc7d6a176326bc2
SHA512

200c7f71e564e345ddbc868a17abd195eea5f67ee2fb68fe8226dfbf235057540a05baf0f931ea0cc36d9a2a637f7a543380375770de28df8e8b3e62ae01bbe7
SSDEEP

12288:RLcPm94n/oDBPoCNpXmZAkZCDeH8jOzG0EkTBdu+hmi3aDdgZxIWA0VBc61rjAje:Fc84/WBdAAkgeWIStFxdGmxm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da7e5fd9922eaf334884820d3a7c581e_JaffaCakes118

Files

da7e5fd9922eaf334884820d3a7c581e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

/#w; 7M
Size: 213KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ