2db80c743abbf0cc3a30cecc7aade574_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2db80c743abbf0cc3a30cecc7aade574_JaffaCakes118
Size

1.6MB
MD5

2db80c743abbf0cc3a30cecc7aade574
SHA1

146cb5bc660fa949ac0aa7b791fcdc6b10f49dca
SHA256

a49a2dc02b72d2dd698dec95d7ea5e79a3e50fc06230444d336eabe02f426ebc
SHA512

94f3e07fc49e0a892d7b6a2ce0eb299951b0f4e3b826e486da92a675a76055dd993fbeb8d867856dd4b4aef954dc3c1bd6516102ae2a8975d65465fbcc995c76
SSDEEP

24576:C95GOhlmSjgFh+5p6NWKDpHQ2j2oFcLVMtg/ZHFBocS1l7x/xCJKnYLSx5+YtQMy:qGObjgIgHQ45c+gY7mJmQMgqu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2db80c743abbf0cc3a30cecc7aade574_JaffaCakes118

Files

2db80c743abbf0cc3a30cecc7aade574_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

REHAM.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ