a4570ebd494f32749b0c81aa9e6f8e76_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4570ebd494f32749b0c81aa9e6f8e76_JaffaCakes118
Size

692KB
MD5

a4570ebd494f32749b0c81aa9e6f8e76
SHA1

49f122a9b3fc626678aa63e1905f6396e274382f
SHA256

607ea9d86a5773bc56b604e4e0f6f239a1e7a2b6bd15f04b8ba27f19c60c8e4d
SHA512

815075dc1909d61ddf0eb0d447b4ecd8a5b79226687b9cb1b42bf67333b51a545ad115a25a76d835c8165914c4f4fdd5d418dc382b7aed2fdde87371608e82db
SSDEEP

12288:tGV1MCBoBz7yR8Au2+07No7Xg9aacNv9Pu/wNfsJ0W47:AgCBkpI+07NoM9A0wNu47

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4570ebd494f32749b0c81aa9e6f8e76_JaffaCakes118

Files

a4570ebd494f32749b0c81aa9e6f8e76_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 680KB - Virtual size: 679KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ