442700bc746b9121ed286f942fe9bcdc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

442700bc746b9121ed286f942fe9bcdc_JaffaCakes118
Size

6KB
MD5

442700bc746b9121ed286f942fe9bcdc
SHA1

646f896b0b282ffaca85c72e5ec99973d38a450d
SHA256

fbcb816b4a16158ae98c6b66c7875f9384b5bd7e016c58018ae23579db7a27ca
SHA512

7a18be3954c1ddfec7076d57cbd39ef5e09724e77a19ac96e8316b01548161f3c4a6c9139039dac0a1c8f55d2dfb54c52c8da327463b70de51c2a7df4f35f5d1
SSDEEP

96:HYc+uka+0p6PxdYfhuj4OyZ3ARadxF+phSKl8Q9QEJF5/E1CyvdhUT:BHkop6PxlYlA8zgS0Qg/E94

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
442700bc746b9121ed286f942fe9bcdc_JaffaCakes118

Files

442700bc746b9121ed286f942fe9bcdc_JaffaCakes118
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Elevated_MpMiniSigStub.pdb

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 598KB - Virtual size: 597KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ