694894064cd14c2b4b0abd2db2c8362d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

694894064cd14c2b4b0abd2db2c8362d_JaffaCakes118
Size

151KB
MD5

694894064cd14c2b4b0abd2db2c8362d
SHA1

895d5451681626e1e45a5d761f54d2c5cc4221be
SHA256

0b3ce32c1ce770970769d8e56177c95ec1f36dd65014cdcfd489f9a46ec51e80
SHA512

4baefc0398fc384dd7dfb3aa6dfcc69acba4521e82a02365c0766cc0a43c2e7bc36e781fb79990b52c412109ae2a67cd9c5ad1bdf26ddeba9bcc28a3e005cf1e
SSDEEP

3072:vE1PNK+KsFJyVIvig9lp9phExIHGRvjznlQSV2k+f53IIhIIWA:+PNK+Ksv5pe5t+R3IIhIIW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
694894064cd14c2b4b0abd2db2c8362d_JaffaCakes118

Files

694894064cd14c2b4b0abd2db2c8362d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\packar\Bureau\Obfuscated\Setup.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ