42e72e8ec24a33ff5a96011c9e0e390b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42e72e8ec24a33ff5a96011c9e0e390b_JaffaCakes118
Size

596KB
MD5

42e72e8ec24a33ff5a96011c9e0e390b
SHA1

b351a75cdbbaa7329a0120812b922f5a3800bcfa
SHA256

ccc2fd0147780f284997e20002476f5e3c820c3273d9b532a24a5de1717d8df0
SHA512

55890b57c9601aa06e3dcff50f3584466fcb35a50ee9fee20cf20ffab83a33cd2e5a5cc9802521f3395e1944d5cabbc21a9d25abe24401a5878cb0ec3dcc2580
SSDEEP

12288:m2w7F3Bz3W7shV7CZQ002LVTyQ002LVT3:AF3tm7s7LeRT7eRT3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42e72e8ec24a33ff5a96011c9e0e390b_JaffaCakes118

Files

42e72e8ec24a33ff5a96011c9e0e390b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

p:\Target\x86\ship\setuptools\x-none\Flattener.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ