ac64b322abd34744310c91b5caab6ec0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac64b322abd34744310c91b5caab6ec0_JaffaCakes118
Size

183KB
MD5

ac64b322abd34744310c91b5caab6ec0
SHA1

dd21c478c166d64bed79f5916733e53fcf43378b
SHA256

6fa4cd767551aae4be4d7708d9d36544a4fa35ece5f9ca45590a5b3d6342d1cc
SHA512

b079357a85725019c8a3675a72ac00cba47abf7a046e5c0e9835a2e16aec50740e4950cac161def608af0eacd7c378fa7b154c4f9587d38bde5aec52d8c77e61
SSDEEP

3072:91QwTPyxBniHxIFHH6hD3IX9j5+RY1snJpsRn3Nz7rzEDSmy6Be5WuMu:917TRn9g99+RYqnmnh7r0SmTBe5Wf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac64b322abd34744310c91b5caab6ec0_JaffaCakes118

Files

ac64b322abd34744310c91b5caab6ec0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Java.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ