30e4d1aa91ae5db0a1ee3be9e0068bb4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30e4d1aa91ae5db0a1ee3be9e0068bb4_JaffaCakes118
Size

5.0MB
MD5

30e4d1aa91ae5db0a1ee3be9e0068bb4
SHA1

35be9da8ea1ee514ee12493857769477f0301992
SHA256

c3d311793d65ccd64453d44042fa80616ee0db53d28d0acd6ddf96b0f0cde284
SHA512

19b9f849dbcf310d7c0451e683492c435c0ed2d1ad6ca3945164f88a1fa52cbff5a37e564a5cdba43933c8f2285bc127a7f9398c71c45aa0eb4689b52751ab63
SSDEEP

12288:r4LGmxhom6NwJqSqEZb73y5RoEN1OOOmOOOIi:rwxhom60qmiz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30e4d1aa91ae5db0a1ee3be9e0068bb4_JaffaCakes118

Files

30e4d1aa91ae5db0a1ee3be9e0068bb4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 423KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ