625959a89a80ab1f8bbd5ab00fe5d7bd_JaffaCakes118 | Triage

Sharing

General

Target

625959a89a80ab1f8bbd5ab00fe5d7bd_JaffaCakes118
Size

682KB
MD5

625959a89a80ab1f8bbd5ab00fe5d7bd
SHA1

9e6c739f7f55c9741de97ef965061c093cfa31bc
SHA256

f31a6236317cca6357085df19cf0805097ae4bb6f78cf146b8f419d179386efd
SHA512

301cbeeab1a6c08e64f61539934d233fa7eef59a4eeb74d2d698da0f51fef85834d4e239a2e145d6fd5182e86b94086e2ddf28bdcc5ff06f7c741f7e8e01bf6d
SSDEEP

6144:gIPxuedVfSu7JXr6ehPIEUYx+5JFCIaLvevHPH+xNURhmNbaCC:gI5bDtXr76e45nCFevvevU2b6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
625959a89a80ab1f8bbd5ab00fe5d7bd_JaffaCakes118

Files

625959a89a80ab1f8bbd5ab00fe5d7bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

/_/obj/Editor/IntellisenseDef/Release/net472/Microsoft.VisualStudio.Language.Intellisense.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 650KB - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ