07c1219d9fe2b1d131b1a13893b35b68_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07c1219d9fe2b1d131b1a13893b35b68_JaffaCakes118
Size

476KB
MD5

07c1219d9fe2b1d131b1a13893b35b68
SHA1

158f3ce7371b7baa2a75f47baac93b098aa4c4e4
SHA256

29a4692a4ff6d78044f6a8fbe5c7ad0fce693a404486eeca3ec65b9408bd5a39
SHA512

37a0153939207d33429521f43d6a3a947e37415edcccd249ac89dfb2f188e2a7149940d97218658cb3d78394d21d0d37faa998fd1b2c38bffe20dea5cd0e65e6
SSDEEP

12288:4IiRBHEGrhx4NHFUSCI/Gp6N9uPEpQUWOTbF5A2oyydh:i4NHFQmGpw2EpJWOXY2O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Rechnung.exe

Files

07c1219d9fe2b1d131b1a13893b35b68_JaffaCakes118
.rar
Rechnung.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ