450fb178754c61131aebdacd82922cbc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

450fb178754c61131aebdacd82922cbc_JaffaCakes118
Size

431KB
MD5

450fb178754c61131aebdacd82922cbc
SHA1

8b76cfacdabd7285c23bd9491385ccabe188359e
SHA256

c55a3cbb294ff5b2c616940adb5d32b8d278fd55769f13ca100d2eb7ecf6a96b
SHA512

c4a5a128a589e993b6d8e9cd57c8d50436154b76b59fc73f2f4cc2d0f3f01054b7f1e8ce146f0f111114ef824b9fb2bc7cffacc6de5697ffad8242c268b67c90
SSDEEP

12288:d/3KZ6QnTYns5o5MpGzN0gy81breI4QxvfXt:V3W6QnZ5o5/ZycrHvdPt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/New Order #442-173.exe

Files

450fb178754c61131aebdacd82922cbc_JaffaCakes118
.rar
New Order #442-173.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 446KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ