a4c0b18c4b4411e2d74323ef8dfe0331_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4c0b18c4b4411e2d74323ef8dfe0331_JaffaCakes118
Size

9.9MB
MD5

a4c0b18c4b4411e2d74323ef8dfe0331
SHA1

cd61ba4019570ce1e3c1762b4a1137985f3b88be
SHA256

e4c8a13a96d090b7e309b22e8db274c8c2fc01cecb6baea1d4f18e221e91fccc
SHA512

e2bbe0a1aa5746d4dfc15ac5e82482bd31febe8774e0d1e9b74e309ab985e45eec0f6863f4f2d11bdd8c1730517b3b2300268c2c0df402116531538611298a82
SSDEEP

196608:lssKr8kWpXQBuJsi9K2TpI0dcAag0cSXDwOuGg7Ftyi1zwc:mrbQgcJ/9KeIEag6I7rBNwc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4c0b18c4b4411e2d74323ef8dfe0331_JaffaCakes118

Files

a4c0b18c4b4411e2d74323ef8dfe0331_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\adreyi\Desktop\ZipArchiveTV141-22-08\_ZipArchive141\res\temp\packed.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 483KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ