841c0391896304561d1558744f83fcf4_JaffaCakes118 | Triage

Sharing

General

Target

841c0391896304561d1558744f83fcf4_JaffaCakes118
Size

548KB
MD5

841c0391896304561d1558744f83fcf4
SHA1

bf5fe30240fcea41e6e908f7c1a246c3d249b513
SHA256

e210b8970aa7606b216956d0b51cc3587a6968713543026d13e9093699adde0f
SHA512

360358f4eb0e5aa11a6b469ce3783a8982a484472d42a740691ce523594390203e4602d38ac493bda6de5a2066648f584dac72f9f07877afe0c62c4d0ee0919c
SSDEEP

12288:yfrB15rvB/PiE0lP+jkaoW83NEozq3Y2YcabFIIhII:I1z+lPGkaoWwNEOq3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
841c0391896304561d1558744f83fcf4_JaffaCakes118

Files

841c0391896304561d1558744f83fcf4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\packar\Bureau\Obfuscated\Setup.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 517KB - Virtual size: 517KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ