670835a3f8c198692857b60d14279a24_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

670835a3f8c198692857b60d14279a24_JaffaCakes118
Size

161KB
MD5

670835a3f8c198692857b60d14279a24
SHA1

8e0fd083da885d1f365db60886b87890de4aece9
SHA256

e9acc848f57e9bc222c26dee733395218e491866f9ee6e4bedb99138d8edf446
SHA512

975b778290f8a29193ff782a89f398b68e27fe9be550cf6940909f77eaf78c6989c58ea38a091dc1d9c594f98694788c3d6fd2bc07030adb1663edde0236f2bd
SSDEEP

3072:PE1PNZ+toSovifSsFJyVIvig9lp9phExIHGRvjznlQSV2k+f53IIhIIWA:ePNZ+twifSsv5pe5t+R3IIhIIW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
670835a3f8c198692857b60d14279a24_JaffaCakes118

Files

670835a3f8c198692857b60d14279a24_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\packar\Bureau\Obfuscated\Setup.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ