a24633b956b4f7c521797b9e53857252_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a24633b956b4f7c521797b9e53857252_JaffaCakes118
Size

490KB
MD5

a24633b956b4f7c521797b9e53857252
SHA1

0b3c94d09e744a78f637fea3dd3b78f7e616c20c
SHA256

b388bef525aaeba578b6b729ae4aa59fda689844829cae6f5c9205996f65d32a
SHA512

0b4e7548df7acef2713b5fd066c71903015ca8536e293abbefbb1140dec017194cb4a9f02621cb04e6d8152469fc61b7fdf1d7ed86c97d42bafeb3967323a3a8
SSDEEP

12288:hy0YPtMd95TGZfNfNWFmJLmTV4Vi3eBJFPwsh:hdC48JNC9x4k3eBJT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a24633b956b4f7c521797b9e53857252_JaffaCakes118

Files

a24633b956b4f7c521797b9e53857252_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 488KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ