a4afb4cdd0de22bb544e4ec3ff44dca2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4afb4cdd0de22bb544e4ec3ff44dca2_JaffaCakes118
Size

406KB
MD5

a4afb4cdd0de22bb544e4ec3ff44dca2
SHA1

89bcee400b3eb00867ea5dbd2acd6980925d1c2e
SHA256

46d33f2e224e9fe0072a3ac154551c68d58fa72979920b596e0015bebb64c8a3
SHA512

f8a03cbd48d1516558332e870d7742c002492fd0533ce213ffdec1bf9c9a9d262394f75db8568a56d08ca016c2a5f64710953f700385b707edcd342e70b75e19
SSDEEP

12288:qeSVAQRxdW5NVf+wVRvXPLGhVbPRSJ204r:qeyxx8VGKRv/qDEJ204r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Payment Notification.exe

Files

a4afb4cdd0de22bb544e4ec3ff44dca2_JaffaCakes118
.rar
Payment Notification.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 501KB - Virtual size: 501KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ