229bd5ea8140f2834405bbc8d9b846ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

229bd5ea8140f2834405bbc8d9b846ea_JaffaCakes118
Size

4.2MB
MD5

229bd5ea8140f2834405bbc8d9b846ea
SHA1

4f463da5cecdf5c00fcca591e442d649655dd771
SHA256

05176708d0a37cac1c64038b67f23ef02159ac31ef0f6a6c63a7d681ef938e8a
SHA512

d784010b66078e2ad1f80d6a31503389a72e29be5d97221c22e575beea1c18849653682f20beb1ce5c6d18269bd73a1dd47835f3464af6a9d8ee7946ddae1934
SSDEEP

49152:u53TvGBmfDcOdBTfkR1nGOaWu9G7zsLCtx2He3SfRCBad3:iaBm7cOdVfkjGO30yge3SZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
229bd5ea8140f2834405bbc8d9b846ea_JaffaCakes118

Files

229bd5ea8140f2834405bbc8d9b846ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ