2b31bec31d1820dbd019b4022e173e0c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b31bec31d1820dbd019b4022e173e0c_JaffaCakes118
Size

137KB
MD5

2b31bec31d1820dbd019b4022e173e0c
SHA1

2fcbfcfa02cb0da6c8436bae3914752c0ed9e7f5
SHA256

9d1e785de6f413463a503630ac84b438af9fa80df57cdcecc1e703617f6ba5cd
SHA512

cb65bb4f043e12af31928db7fc7233f1a4d5afcbf004a1b5c726a35b974cd2ab89d16a246b29420bfdf6f5edf15ac3047e54729a122ccafa3ff941fccbe00268
SSDEEP

3072:gVbzqHv47CmByk4u5v5c1smXzdNDOyb1nz+kYwq/:Cav4BykAxXZNJYwq/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b31bec31d1820dbd019b4022e173e0c_JaffaCakes118

Files

2b31bec31d1820dbd019b4022e173e0c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ