97f67165e987f3e30e6237959ac4dec4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97f67165e987f3e30e6237959ac4dec4_JaffaCakes118
Size

785KB
MD5

97f67165e987f3e30e6237959ac4dec4
SHA1

ae5101ea3a45bfd2dfb59e1b5a66fee0da70b43f
SHA256

8958c670d4cab09e4ac54be6bb74eba4f47ec0df13819e079a45170b1cc50b1f
SHA512

a3b2c3f15cfb82fc9569149deb491f4c4d9867e6f9f1b9cc7db5e83c95b2bbad1b0e84d430b8c74df4c2c003b6de5d89ac1ddf45bd0db64f8fdac32b68bce07d
SSDEEP

12288:x9d2tGBJmJT6xENslj4dMTE0qXgtGBFmJvkR4rMhj41MB7Xh:xDDBJxxEQcMTE0qXdBFbR4mEMB7Xh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PAYMENT.....exe

Files

97f67165e987f3e30e6237959ac4dec4_JaffaCakes118
.zip
PAYMENT.....exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 918KB - Virtual size: 918KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ