fba9df3604f85c60dbfe9e18e9485e0a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fba9df3604f85c60dbfe9e18e9485e0a_JaffaCakes118
Size

1014KB
MD5

fba9df3604f85c60dbfe9e18e9485e0a
SHA1

d3ba85eea2af4182e35f96f13b1e08401f31cf63
SHA256

5bf0274adf80ff2a5452d79ba5ea2d23d933c54aa36337c4fe3379aec04d7349
SHA512

806441f3528d335d9165dfb77ee2e0043071a7c7b834ed6339ae24a67543774e78f23aff5edd064cfd0837e41306dccc1b3c340411d82d1646ec832783ae4902
SSDEEP

24576:dSO5t1v9CqHQy5Sk2A1zqRSO5t1v9CqHQy5Sk2:dN5p92AVON5p92

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fba9df3604f85c60dbfe9e18e9485e0a_JaffaCakes118

Files

fba9df3604f85c60dbfe9e18e9485e0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

LoadMxf.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ