7584550302582fa502ee89c45a84e8a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7584550302582fa502ee89c45a84e8a0_JaffaCakes118
Size

260KB
MD5

7584550302582fa502ee89c45a84e8a0
SHA1

1477d6ee9cef5d9269aa10ee597c54c2b295672f
SHA256

3c17082c7e268a74230b0df4dc3e9b582530978c5eb2225786c88807b988d4d9
SHA512

eeb20017cc76f193a47a9b9b41969be0e99c9b77f4e60023c57349451467cde8a242487f651cbc8f998259bfb549b04f1344003c0201abb48af483f8667ef1f4
SSDEEP

6144:7X4mqOfN9POdy5RBgYkMAL8ALDYzYw5wJz6zvzALd+R:BPOYWYk3qwETJR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7584550302582fa502ee89c45a84e8a0_JaffaCakes118

Files

7584550302582fa502ee89c45a84e8a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

PDB Paths

C:\Users\Devitril\Desktop\_ZipArchive140\packed.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 219KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ