259c2b1f2700348ba4d5724a76593344_JaffaCakes118 | Triage

Sharing

General

Target

259c2b1f2700348ba4d5724a76593344_JaffaCakes118
Size

614KB
MD5

259c2b1f2700348ba4d5724a76593344
SHA1

6ee9b850bc75b8327c00b65a25ea904b53822f8a
SHA256

adb1916ce0d4c3dd80623a2bde416cbfd68f6db71f8da0132101daed4f86dacb
SHA512

c90f4d529a7313f4c7b7b26179401255506eab0caf5fb44dc7836111e7faaf0088bcbda09a47ab2886dbe18ad1f71926012a5b80a825794ae35feece20d58fb7
SSDEEP

12288:JhEn44D6ADx6lUnzaFqWd2viTsWGIHCMyDskak3CFJTYrEkjUvV:f14DfxRzEdAioAiVDskaqCFJTFkj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/9a08c8a2b49d6348f2ef35f85a1c6351.exe

Files

259c2b1f2700348ba4d5724a76593344_JaffaCakes118
.tar
9a08c8a2b49d6348f2ef35f85a1c6351.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 610KB - Virtual size: 609KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ