a84204e538c8ced8ddc0fa795e0f1efc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a84204e538c8ced8ddc0fa795e0f1efc_JaffaCakes118
Size

120KB
MD5

a84204e538c8ced8ddc0fa795e0f1efc
SHA1

76384e0e62a4529a3edd0eedd8c84c8ac1e377bf
SHA256

d176d528000e053bf0108555dc27e9a403c82e38b15523ab510143a713a42d5a
SHA512

a92d2fc2058c46595d5f62a3b636951ab9913cf25d47a6839b9a924f9111bb05a18abc276faf9a50bae76e9c7bc92f933d05213f57cad5850f0db46ec43a6b30
SSDEEP

3072:RqqKl22YEaCddcdVsrMXbf425ur/twZ5H9f:R222dGor2bAoq/Gt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a84204e538c8ced8ddc0fa795e0f1efc_JaffaCakes118

Files

a84204e538c8ced8ddc0fa795e0f1efc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Mesaruk\AppData\Local\Temp\oabyybgb.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ