0699f752e061f3b4df658ac98e630271_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0699f752e061f3b4df658ac98e630271_JaffaCakes118
Size

580KB
MD5

0699f752e061f3b4df658ac98e630271
SHA1

71e68af77251a0a22054783f3bb34622ec845927
SHA256

961d974206f65649724163fd5ec4efe06467a49e57d6bba6d1a92767f089b527
SHA512

232087fb6be951ec384540f1ed540b99c466e07c64656344eb5e77d7622e647f36b918e25aa7782f9afba8e508c777a348c3f3834a67c6a466271427dbfa4557
SSDEEP

12288:9tgSx5SAFqbyO2nXa2zdwepWD9+lGNyrz/F8auzFnsvkBc4K4p5yLXZz:9dx5f4lYhzG7D9sGNy1HKsE1K4/uXZz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QUOTATION72.exe

Files

0699f752e061f3b4df658ac98e630271_JaffaCakes118
.rar
QUOTATION72.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 572KB - Virtual size: 571KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ