f030d60ffe37809bd346e7d630073713_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f030d60ffe37809bd346e7d630073713_JaffaCakes118
Size

4.2MB
MD5

f030d60ffe37809bd346e7d630073713
SHA1

05af23554ac0763ff9d5443d4a9bb2c649a96093
SHA256

2c635a8bbdd9fd4979d5444f762d9c3e0b23233ea961967ba4a03437a61f0a53
SHA512

cb2620266152fb7b757cf86c0d4a38e0c27a29e61f383e3024f8e70ef90d2c6bf2e42235d83cb138b354ec73cc170a17ca0bb410686b8e765417ab5704ed3a41
SSDEEP

98304:mhFtXB4uluJRmMg6QWlIpgi0rHqsih/mCqZB4uluD:IvsJR0TW6yiIKRhzqtsD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f030d60ffe37809bd346e7d630073713_JaffaCakes118

Files

f030d60ffe37809bd346e7d630073713_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ