7e484e9e22baed3bdedf613d3e659085_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7e484e9e22baed3bdedf613d3e659085_JaffaCakes118
Size

18.4MB
MD5

7e484e9e22baed3bdedf613d3e659085
SHA1

64f9e2ef2397e6b5f6143d76991495d54a6b054c
SHA256

5d3d8368d63e6ec74fbf4322c914dc19c840beacb1513e73695b0e341438f83d
SHA512

ea4fc7e8d7892343ead8bc4d3baf1cf5491b3f2428a0bdbeae51bb71c30bea58bf6be4364e96613e28d55098b998f61ec487f1ddd88f99dd07fdedddfb54ef83
SSDEEP

393216:GrfO8xWZ3pnoyKDHYmL7ZZ98GrERNF/iReHoMxUTref6V5SW7pgleh/6g:GqF3yJL7ZfNyFqRe+TfV5SMpgch/6g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e484e9e22baed3bdedf613d3e659085_JaffaCakes118

Files

7e484e9e22baed3bdedf613d3e659085_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18.4MB - Virtual size: 18.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

mWEpzctw
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ