azorult | 56dd6318eb6969046fd319a2323646b6_JaffaCakes118 | Triage

Sharing

General

Target

56dd6318eb6969046fd319a2323646b6_JaffaCakes118
Size

314KB
MD5

56dd6318eb6969046fd319a2323646b6
SHA1

be2d7f02cfa582fa14a85bf7c53d60d93dd982de
SHA256

c3e560ae5b815341deb695f0015c1f28d25ce9bad901b5ee536a2ee63deee9d3
SHA512

b07509b45e13e1f4a5311a67adbb347ec58d4c9f85c935724043f889a81a0a489ce57f9123281f0046a31ac3af4d17c896d64026505f4884123c16a28b1cab2b
SSDEEP

3072:ZJ6ExRaQ6raoCoCyz6/mqv1JR+yBtGOeaeWgiHqvUi/dCMMw2bWwfouoh0YTDy92:ZJvaO1tme++wiKvz/alTrg0YT

Score

10^/10

azorult

Malware Config

Signatures

Azorult family
azorult

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56dd6318eb6969046fd319a2323646b6_JaffaCakes118

Files

56dd6318eb6969046fd319a2323646b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ