aac91800ea78d05a0394dda3b8c3524b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aac91800ea78d05a0394dda3b8c3524b_JaffaCakes118
Size

321KB
MD5

aac91800ea78d05a0394dda3b8c3524b
SHA1

a24ec78a6be766191100eb84b485cdb8c016193d
SHA256

3bb1325fbbd24fef1ecbb5a295c391d0eaefe5e2ac30fe85f00fdabb0d168f90
SHA512

3c22b00203b89c87c9b34fb5767636608d010856546828d146fadf29fd5ec668586a7884579410df629430df6266b73534cea7dac24cd8d182dceb63d9783a71
SSDEEP

6144:5wrpcJ/ftnUPGclvLkWm/ycYnI4Xua1utT03PI2gVOoU:5wrpcJRelvqKcYIfIutmgVbU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PAYMENT.exe

Files

aac91800ea78d05a0394dda3b8c3524b_JaffaCakes118
.rar
PAYMENT.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 375KB - Virtual size: 375KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ