3729af5fa1dc3f93368f842da75f1813_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3729af5fa1dc3f93368f842da75f1813_JaffaCakes118
Size

157KB
MD5

3729af5fa1dc3f93368f842da75f1813
SHA1

2097cb6972387e43cdf38c1a2899379cec67cff1
SHA256

bd84f02650437872b74ffc6769ac33a82cdd1e51c8f456abb01dd01d382047f2
SHA512

0f2af076d9ecbd21cb1eeb78b7df56167a1e1b296c208ebb8276539492fada4f1c269d79232efb431deb9a68fa230a40a4e1cfbc73120ce46ae32d3278cc2ce3
SSDEEP

3072:fmTATr389qRtUucX8CCgk+dgBhyrMHjpYmDXSQUb5izkJOMq0j:+TATr389qUX/CqgBgMDpYmD8Viz5Mq0j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/doc3663811I2889BFQASC287762.exe

Files

3729af5fa1dc3f93368f842da75f1813_JaffaCakes118
.zip
doc3663811I2889BFQASC287762.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 332KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ