98aa5d675a642912131bd25b53c9686c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98aa5d675a642912131bd25b53c9686c_JaffaCakes118
Size

239KB
MD5

98aa5d675a642912131bd25b53c9686c
SHA1

4e683709c3808ee7f6cc750a5253cc45d697c71c
SHA256

dcb69c6ffed365caeb8f9337f7086a344733a4551f94e517f5abd6d2361e7b8e
SHA512

a1d52d69fb204d316ed67cc1d69575b9d7e1b46be7695485451207dfba8a1c7a173f49569514855cb98850da67ec11c27dc5a6036334d201ad84cfdb7ca9f0ee
SSDEEP

3072:eKEGJm2tB+CUnJcjqmlNVXw+cFC1ZoGX5S7EpLWx09Qwm4cSn9lLrIz/gZgvtgTF:eOJm+BEnPmlNVXaFOootWlfSnTLyoWm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98aa5d675a642912131bd25b53c9686c_JaffaCakes118

Files

98aa5d675a642912131bd25b53c9686c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Publisher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ