421110be576c37c4bb2a87bdf9ea12ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

421110be576c37c4bb2a87bdf9ea12ab_JaffaCakes118
Size

7.4MB
MD5

421110be576c37c4bb2a87bdf9ea12ab
SHA1

cfaa9eef605f4ec4269244c0e6f54fd5f485ed3f
SHA256

5a0e4a5bf8ade8837a66f6d613145d9c88d74eb329c28802543059123fdee352
SHA512

b6739379e82c01d4992f803fb602decca60c615afd3261f6f25e7dcdfebe9bdeb6970eaf40d03867c5ec6815fb4a40982945346c3b7c7416c01d77cc23035480
SSDEEP

196608:cpnhJ+/FkaoMLS8Y9kJUXg58RVEyYGPNcThAmc+i1zw5:cphJ+/H285ulTpShONw5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
421110be576c37c4bb2a87bdf9ea12ab_JaffaCakes118

Files

421110be576c37c4bb2a87bdf9ea12ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 140KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ