2a3d41015f3631bfd5172b758de42cca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a3d41015f3631bfd5172b758de42cca_JaffaCakes118
Size

131KB
MD5

2a3d41015f3631bfd5172b758de42cca
SHA1

4ea6ce3710dd2ca91e75ba1a5ff90b9fff953322
SHA256

18c6e519d26aa7c1e2db0ec75e7fe88016335fc3cadf2629db7d12ebef2fc8c6
SHA512

0e4f7d775e3ed74e73358eaf9bf989430b02a27500429c8ba1b6e6ad967b98d30c80ee603e4ae43508f0d5d7a0b9ad4603096db2ba03b450dd50242b06258d6a
SSDEEP

1536:1FoyMzgzc6Ub6U89oQqWbDNwIDdzO2LT2kr/7dDS01JKkEPQ2RDlFzKePlC/vSdY:74zaCM3uIDdF9BSAkkEPfRFRgSKGM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a3d41015f3631bfd5172b758de42cca_JaffaCakes118

Files

2a3d41015f3631bfd5172b758de42cca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\Templates\????J??g3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ