048bceaa8c41bbf8b491289c3e42de3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

048bceaa8c41bbf8b491289c3e42de3a_JaffaCakes118
Size

5.5MB
MD5

048bceaa8c41bbf8b491289c3e42de3a
SHA1

f08cc024223d919f4716dec20659d672e3b594fc
SHA256

492f1fc62bb4db2d12afea8678e1c99d40028a7207363270b02cd51c86b2b804
SHA512

3667ea25931a5e97f241e72b8caced8436311d91f9eb0512bd0662a5daa1628ee3fe8b70131d3456be33780a35f970ed6d59f8651223f031288fcfdd33d28ce9
SSDEEP

12288:RkD4LZdIRU8wUcofuppk9cdua5Yx0ZVDRn:RkDkdT85ck8rduaKx0ZV1n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
048bceaa8c41bbf8b491289c3e42de3a_JaffaCakes118

Files

048bceaa8c41bbf8b491289c3e42de3a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 460KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ