884c7243c2cceb6bc01809e9ef4f6075_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

884c7243c2cceb6bc01809e9ef4f6075_JaffaCakes118
Size

712KB
MD5

884c7243c2cceb6bc01809e9ef4f6075
SHA1

eaf172f1f1203ddbaa0277ecc2ffde2e0d8bf957
SHA256

5270c6e982f5b19dc030e0ffe7ec07e983d471b857223ca6d898c48b1e0d528b
SHA512

4c69358847447cc7bdcffa89a7060a97bdf3126bc53f8c59f07f72592f87eb892d1fba1af038f770c7f89ccae71632cc3733b38471c3c9eadb087edeafe782a3
SSDEEP

12288:GDaS6GntInq9SKy5zAuOnGAYfFFRjx+ul9SA6wmyd110TGUpT+Cluh5:QaKynqcKy5zQnGAYf/KulY2xXS6h5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
884c7243c2cceb6bc01809e9ef4f6075_JaffaCakes118

Files

884c7243c2cceb6bc01809e9ef4f6075_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Forever\AppData\Local\Temp\gftvacy4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 696KB - Virtual size: 694KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ