149f3dab49912d9b6ec17c3cceeea89b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

149f3dab49912d9b6ec17c3cceeea89b_JaffaCakes118
Size

520KB
MD5

149f3dab49912d9b6ec17c3cceeea89b
SHA1

b0f2065dd8897f2cc6249db0570d5093a0297553
SHA256

0de691ba8a8cae059180614b107960259998e35181fa54379fe97c58c61d7278
SHA512

dc574156317adb5dfc41217b9c8769d78790d57fe313dda228f73059d0fd38bae74d6037ffb0a4a33dfdd0b066d2deb7fa977e67ed36fbe786895a43cebf11c8
SSDEEP

6144:HanJBi7+T798rslRcoWJusBTNKx8LqwA:HanJBi6T7OslwTNKx/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
149f3dab49912d9b6ec17c3cceeea89b_JaffaCakes118

Files

149f3dab49912d9b6ec17c3cceeea89b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 496KB - Virtual size: 494KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ