02a1d12573f25e2c3dc5a3cbeab95ba4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02a1d12573f25e2c3dc5a3cbeab95ba4_JaffaCakes118
Size

822KB
MD5

02a1d12573f25e2c3dc5a3cbeab95ba4
SHA1

148f271664a2d85954fc6ca8e8fe324cb111dc17
SHA256

79eaf2d7188fe253da3171e6b4629105bb5399c125e60c90905b7d7b4ca507a6
SHA512

152ade000175f8bc3ce851f9c9e467e831b97e41304f348bd434534c79e013d901193eb8b8339b9f9813f819bf4072f3c3323cac39a635579cf119a25d78f80c
SSDEEP

12288:6PcNQnE3sErb7eGnwnPfJ5SuQ9eYhK5JG1c46:6PBE3so7QnPj3SUJGb6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02a1d12573f25e2c3dc5a3cbeab95ba4_JaffaCakes118

Files

02a1d12573f25e2c3dc5a3cbeab95ba4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\xampp\htdocs\crypting\gq0hI936vgansKWP\W4sFNdlBlDFRsj1b.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 661KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ