f1670cab1f506b29baa4668af746391c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1670cab1f506b29baa4668af746391c_JaffaCakes118
Size

8.3MB
MD5

f1670cab1f506b29baa4668af746391c
SHA1

3250cf0a0d4eaed6b69f45877161f1a8a512a6b4
SHA256

cbba1c25ba9360cbc5ffbffc878fc73eb113393f1868b1a65efc7e227913f49f
SHA512

789c808e3a53932546e47d0fe79c45c801075e07188a30804f7549912e021f7ee8ec7eeb39b3d58e77642782d7e6e96a12b35a24480e77a58edaf95134b405c9
SSDEEP

196608:jVAvAcJaMYqBAcGZDblWAoU9juRitUgvgVAl4NQWqTVi:jVMR96cGZDRWAb98iCgvgYFTs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1670cab1f506b29baa4668af746391c_JaffaCakes118

Files

f1670cab1f506b29baa4668af746391c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

HANARO_S.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.3MB - Virtual size: 8.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 247B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ