2bf9b2f11e03ac84fefb6d559db33a76_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bf9b2f11e03ac84fefb6d559db33a76_JaffaCakes118
Size

527KB
MD5

2bf9b2f11e03ac84fefb6d559db33a76
SHA1

3157ae4d218cf3ea19bf53b1ad3a8fbde92e3ff7
SHA256

607f2f467ad8b778df55a72a923099f534e6924ae7d8791da9e6e42c2e83d97d
SHA512

f1fb0e7ccb39dd1d6758e45bc651acf4355348006311217eb523ea74c0a6f31ced6652c27c8c1e0ac7b8c4cc0a47f842c42ff77784f7ec75104c416df716edf3
SSDEEP

12288:R7q/vHiV7ssi3YGHR36o9oyy59rhUbZ1Ym0:R7ICIJ5770

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bf9b2f11e03ac84fefb6d559db33a76_JaffaCakes118

Files

2bf9b2f11e03ac84fefb6d559db33a76_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Prash\AppData\Roaming\Microsoft\Windows\Templates\??5B??o??z????.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 525KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ