50923a92a0821cd466d83edd5a152fd0_JaffaCakes118 | Triage

Sharing

General

Target

50923a92a0821cd466d83edd5a152fd0_JaffaCakes118
Size

510KB
MD5

50923a92a0821cd466d83edd5a152fd0
SHA1

4eb57f30a70125e2618a41917d7a8e5db743e0b5
SHA256

a1dc18b320d5f906df53dcc7a4d4e547b2ad6707e9484eafb3c8a8855c98a9b0
SHA512

5afa550a87dd5c28bf5140a573f7e87bceaf29325d5fe0a610fb60972887ffa5f904b2fd4b7834daa5e6b556fb7d72d51c4b6472827ae1b60ef6efaabb4e47f7
SSDEEP

12288:VEFBR/Li3r6WxoSIsJTZm08y5hmEfEMW52on0zi8luJ:VufKJcy5o52w8IJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack002/IMG_501327.exe

Files

50923a92a0821cd466d83edd5a152fd0_JaffaCakes118
.eml
IMG_501327.xz
.rar
IMG_501327.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 443KB - Virtual size: 443KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-plain-1.txt