74da90a4f94aa3ce93d0687bbbccb4c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74da90a4f94aa3ce93d0687bbbccb4c6_JaffaCakes118
Size

160KB
MD5

74da90a4f94aa3ce93d0687bbbccb4c6
SHA1

87cb8e12189d100bed120cba11a3438a7501a66b
SHA256

5bb6c8df43b9cc395a8043d280c05a6bb336c8a05addf99107645a99eeafa1b4
SHA512

fcaf6c91271091b041977e69bfb5966dd742c5c65950e198a852e8b75191f60151cb86e71fec875460915a028488421c945e78d765690591b3948b5a6fb10e15
SSDEEP

3072:VejRAzto14at1VufKoPGS28ctXozyNJa6x39t3hT:VwRsto14k0fjRifNw6x3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74da90a4f94aa3ce93d0687bbbccb4c6_JaffaCakes118

Files

74da90a4f94aa3ce93d0687bbbccb4c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Gamer113\AppData\Local\Temp\imo2rfot.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ