b5c39bd4d6aca4c09f92172b771aefbd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5c39bd4d6aca4c09f92172b771aefbd_JaffaCakes118
Size

387KB
MD5

b5c39bd4d6aca4c09f92172b771aefbd
SHA1

4d04c199036673517dfeb4c52f144b30f43f8588
SHA256

71582e70276921c9a46a95bc48a6697a7ad0dde4ad11b4944e79f39cdb2d35b8
SHA512

83c948cb37ee5cfcfc1e8ad7e30d35f6802386b603bfe312243563b7857d563b95af873806e68e71fb4bdc9e844fce6899db5e1251c7052352581525864039d9
SSDEEP

12288:iU1+XA4uvnrgnLqerJALy452qlcyz4w9CF:L1U1ROerJA2DqJCF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NOAH FORMBOOK_crypted.exe

Files

b5c39bd4d6aca4c09f92172b771aefbd_JaffaCakes118
.rar
NOAH FORMBOOK_crypted.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 400KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ