44177a1970d9072056e20e23c26b3797_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44177a1970d9072056e20e23c26b3797_JaffaCakes118
Size

180KB
MD5

44177a1970d9072056e20e23c26b3797
SHA1

1414c7ff5bed90b0a8db62e824b9faf7cc024d35
SHA256

ba5a55b04f62a3bfc2bc0fe2eff13b3d2e94a0514b60a77c5aa72d133a24cf80
SHA512

e930bd4db87fe7ec39e42e23db81945d0206e09852e8ae84fa681b993cc26adb44edd9b0975a017e5ce8a1b6c38077f88f2b263fe4bca360efc0a851a1b919f0
SSDEEP

3072:GE1PNCQVkiaBifupj04cwAT11IsFJyVIvig9lp9phExIHGRvjznlQSV2k+f53IIr:BPNCViaBNjJcwc+sv5pe5t+R3IIhIIW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44177a1970d9072056e20e23c26b3797_JaffaCakes118

Files

44177a1970d9072056e20e23c26b3797_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\packar\Bureau\Obfuscated\Setup.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ