20663722d1c2b2511de80f06127726e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20663722d1c2b2511de80f06127726e1_JaffaCakes118
Size

476KB
MD5

20663722d1c2b2511de80f06127726e1
SHA1

f9a260c0857422b06c1ac4dd662fa6dd5c902513
SHA256

1620c62c4db5d610e88d19000214b933fff4fe672c44dd97269cf8b5eb27cfa3
SHA512

be684d20332db99dcb6717efb98abb4c90e30e5c7e044fd21dbb4b3cd4a0016b6093bd3e029c0466c2bc33125a16f8ccb96c810f47fc9d4934898ba39310d95d
SSDEEP

12288:2+/TE/TWyEwKuf8VbdKNZ6UPvRna/TWyEwKuf8VbdKNZ6UPvRn7/T:2y06wEJhWJO6wEJhWJz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20663722d1c2b2511de80f06127726e1_JaffaCakes118

Files

20663722d1c2b2511de80f06127726e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\user\documents\visual studio 2015\Projects\setup\setup\obj\Debug\setup.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 424KB - Virtual size: 423KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ