9ce1bec16b71d9025ac887cc2a43dc98_JaffaCakes118 | Triage

Sharing

General

Target

9ce1bec16b71d9025ac887cc2a43dc98_JaffaCakes118
Size

671KB
MD5

9ce1bec16b71d9025ac887cc2a43dc98
SHA1

d3019fe70b98359289959eef73365fcae82fe6ba
SHA256

c3727dff978310eecbe3db8dbfe1e478f88827d8410a1659cf9678569c0722f0
SHA512

247e0ca7cda83c9a4359899262208a568b883efec04ca7cdf409d68a28c8b2e4a767f39822db0b07d32e01e08e1ec25cf567fb0717aeebe46d917d004ff0a2ed
SSDEEP

12288:cSEh3sUxCppggVD/vLx2Nn/DGQh3tbJwU3AkZwtEO2Btghuajn4OpTH6aj:cS+qpplBbx2pDGktFh3XwKwxjZl/j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NEW_TRANSFER_POLICY.exe

Files

9ce1bec16b71d9025ac887cc2a43dc98_JaffaCakes118
.zip
NEW_TRANSFER_POLICY.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 710KB - Virtual size: 709KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ