81ef331b2b859fe0d36eb86a4a0723eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81ef331b2b859fe0d36eb86a4a0723eb_JaffaCakes118
Size

330KB
MD5

81ef331b2b859fe0d36eb86a4a0723eb
SHA1

3db19f130222b64076452c0ec506aaedf8cdaeed
SHA256

4c2c48bfe789263cbeb524e697199614f8899608f941dbeffe99167104c07f18
SHA512

73e190248e0536f55886d0350fcadd6523983729d5f75c19333e7470f18ab52e869e07d541b65d2ebb5d26ee1d003b8f9bfdce90c057e4b316c183c903719d38
SSDEEP

1536:i6CPIBtxTkQwLVy+GmeIt8mIj7FW6imemhKw3xgmF+hyzC5jcFBJKRxw/L3o50n5:i6CPIBtxTkQKJt8ldxNxgmMkNBVzY25

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81ef331b2b859fe0d36eb86a4a0723eb_JaffaCakes118

Files

81ef331b2b859fe0d36eb86a4a0723eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

O:\AB\WNRZRNK RTT\EDAKCNY PPT\toy\x37\lxkqnya\LDMOXNC JSX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ