4a032bd7ede5150f3fdd33f52f54330e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a032bd7ede5150f3fdd33f52f54330e_JaffaCakes118
Size

1.1MB
MD5

4a032bd7ede5150f3fdd33f52f54330e
SHA1

416acb6e02c9dbdb88ae7cea4da7bb812c7f36ac
SHA256

c434f31b7f8bf47192403e751309366d4997aaf89c1452dcaf1ede6503d6e7a4
SHA512

459aea2b7c87ad247e84ffd1d62c153601bcb9664aefc923a991c570dae9487beb9beeaed257886535472dfa3cbc0f994f2e1399fb5f96d5e00ee94e4971571b
SSDEEP

24576:UTf4GuRhcNO0Hq4m7P9azVhGcbiEjyH4qepERr:M4s5HdVX7uYR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a032bd7ede5150f3fdd33f52f54330e_JaffaCakes118

Files

4a032bd7ede5150f3fdd33f52f54330e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ