474d78bc4ab4e90f8f2778bf59df404c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

474d78bc4ab4e90f8f2778bf59df404c_JaffaCakes118
Size

372KB
MD5

474d78bc4ab4e90f8f2778bf59df404c
SHA1

b6623f5c3e6e4e88fff438401b19ca4c70a622f2
SHA256

07bc55a49e15c4bb8964f8b4e19a40e5178eeadf3d024a28eed32979c04eb62f
SHA512

9214a2915b809006962072e3767361df2415dbda15e6d15e3327bc5b50af011c8f44cddc201f12fd774205b49c15fead9463f8ff41e3b7fe79016df9eafdcb23
SSDEEP

6144:Yx27lYrhUPuz700h3G9rMP7rSMjb/Hhp+0MaJcMlhEcum2yfUmaGKoNQOzgUGow5:YhFUPY700hW9rmrSub9Maa+h32tmpKoK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Attached items.exe

Files

474d78bc4ab4e90f8f2778bf59df404c_JaffaCakes118
.rar
Attached items.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 401KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ