3a658f1520a0005f93b821ed1090efbf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a658f1520a0005f93b821ed1090efbf_JaffaCakes118
Size

1.7MB
MD5

3a658f1520a0005f93b821ed1090efbf
SHA1

b9b52db22d35c50081054d4ece39f520ae3ef9fe
SHA256

ee3eee5289757becf7b8d5c360fffdd6fa7b7e7aa350c2623632d1b34f36c88b
SHA512

b328650911049afdc520528a3eac65b6f05d4db5e7f442764bf293159cc0fa8a23e366e0fd95d9e9cd76b28322e33a8b16100a6e4f16f7b49e5ddb583af74ace
SSDEEP

24576:bW0bGBVJfYB/m7u4LP3FBCCGP2V0G6ME:bDmRP3a8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a658f1520a0005f93b821ed1090efbf_JaffaCakes118

Files

3a658f1520a0005f93b821ed1090efbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ