0dd568eb50437106faf209dd13a821dc_JaffaCakes118 | Triage

Sharing

General

Target

0dd568eb50437106faf209dd13a821dc_JaffaCakes118
Size

458KB
MD5

0dd568eb50437106faf209dd13a821dc
SHA1

114f7eb1fbbee36ca350d7b434559ea2aed068b0
SHA256

d44d889a83ad2d32ebadca99e33af4823c015159862365305cd3eda5fc4bcf99
SHA512

89b8e2e830db3e5dbbdf7ca5d651959bad7e733a99bb0b156cedb44711b37c95ccf0b33d632fca8d17ecfa604ec0c9b848b0654b0bfeaad74d67d37c33daa0a7
SSDEEP

6144:fFXGJT+2gHEEX+s7DvYBjkaMqr4lyUHLIB8pafvOUJqbWCpNfCBmCrnGi7:fqT+2gH3lDyglqziL1pnUJqbWmfCE8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/REMITTANCE COPY.exe

Files

0dd568eb50437106faf209dd13a821dc_JaffaCakes118
.zip
REMITTANCE COPY.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 931KB - Virtual size: 930KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ