0883bc9ae764374769bf45eb0c805d2c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0883bc9ae764374769bf45eb0c805d2c_JaffaCakes118
Size

543KB
MD5

0883bc9ae764374769bf45eb0c805d2c
SHA1

ea872f74555706f8c66882924abe507dbf7e0306
SHA256

b1be0e1becdb612baf7ac7a23e4365515ae91a0247facd1a03019239d61a5a58
SHA512

87a2f2c49e9d53a48a785d8f1175ece947a5370b59d4f8dd753f6974a834726596bc425af4472db03e945be22ddb3e4d59ca9cca6d68ccf217c4ee254552bdb5
SSDEEP

12288:dN+sEVrNpcLvQi+o2OCYDmNexO6DHfLsbTNqz4WNhPK6aXa9:dN4XcLvQi+njsOTqLaq9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Ref_[GLV210676339].exe

Files

0883bc9ae764374769bf45eb0c805d2c_JaffaCakes118
.gz
Ref_[GLV210676339].tar
.tar
Ref_[GLV210676339].exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 667KB - Virtual size: 667KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ