0526fb01159156a1b8c097304f612297_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0526fb01159156a1b8c097304f612297_JaffaCakes118
Size

10.5MB
MD5

0526fb01159156a1b8c097304f612297
SHA1

15aa7b450fc296c88592d444d2ae5a3fa9699aa8
SHA256

3d3574775c440eb7fdf8210b5acc0b1a790c6c0503e296af7a3ee246361be74e
SHA512

260caf9e314a56b9df7d65129816217352917aa86f67348741409b34b7fb190c1c194ddf45443b6c7db6270a47498b11112120da1dcf0d643c21b0541f80da4c
SSDEEP

98304:B+SMDKkmBRWKa3lJInnBfQ8z9UcEDPfIuiZWz6ZMmleEEpEcpYM:0SMB8sKaLB4NZWzWeEEpEcpY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0526fb01159156a1b8c097304f612297_JaffaCakes118

Files

0526fb01159156a1b8c097304f612297_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10.2MB - Virtual size: 10.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ