483513fe664978180c91aa035f161863_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

483513fe664978180c91aa035f161863_JaffaCakes118
Size

716KB
MD5

483513fe664978180c91aa035f161863
SHA1

44679f9e6e014fa2302d98368b7e4876d46768e5
SHA256

05ddc69331667aa7266787f2304b42bf81568d08af217db216f3201f0c00ba78
SHA512

af1b4c9db0b9dd5a788ec62b2b4808358d6f0c855fad1e10ed531d9f047b6f8728ed9908ad4a29e9829a6deb86368128e4260f43f4a1765493c7ac45c980153c
SSDEEP

12288:YrlXJTnVF3MImne/7G/MWYN09W5VYcGcU6C6:YrlXNPMImnuGPYN8cgcU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
483513fe664978180c91aa035f161863_JaffaCakes118

Files

483513fe664978180c91aa035f161863_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 284KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 424KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ