37a6b45a6db9ff536fe9f7adaca9dfd0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37a6b45a6db9ff536fe9f7adaca9dfd0_JaffaCakes118
Size

389KB
MD5

37a6b45a6db9ff536fe9f7adaca9dfd0
SHA1

708e5b980bc578fbc9eb3a058e7b3ec251941276
SHA256

a3814b159d6c4aac0cb593a6d36835f7f0d53e1ab0107d7aefaaa07e1c828e1b
SHA512

4770a545a00b513574bf7ed945218f8a9b6d7a4021107d2fbefbb9411f0ec838e8a471eeed0160e0ea37436eebe38df43ebc6f0d5e61175b04fd89da711214ae
SSDEEP

12288:TMdTaOu3tOaiPSkuTPTlV2dEYz0Ev+xsvIBe:PdOHSkiGdAEGxBo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/EncodingHelper.exe

Files

37a6b45a6db9ff536fe9f7adaca9dfd0_JaffaCakes118
.zip
EncodingHelper.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\bukovau\documents\visual studio 2015\Projects\EncodingHelper\EncodingHelper\obj\Debug\EncodingHelper.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encodingInsruction.docx
.docx office2007