ab2dea698ec0f6e5d77afef2f9981364_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab2dea698ec0f6e5d77afef2f9981364_JaffaCakes118
Size

331KB
MD5

ab2dea698ec0f6e5d77afef2f9981364
SHA1

94a4a1576e375fef93a21ab248462251a39e99bd
SHA256

5e02e413cd79ef2a83c22f365ae9a2e0f5adafdc54a7b191aa5f8f8f27eccf7a
SHA512

9b1b8fc3f446dc8d7eb65f8c41a1a2e84f7ebe634923eeee20eb42d83d114e45bc947da2dfb1b373f7589abd83711267ce108f13f120268286004cbde1f19153
SSDEEP

6144:XKsiF9rZhBqJRra2SAkgw5qQrm870Sp5jVom2el30aC7Xif3Swcp4y:XKdeHSn+qm87fzjVo/a1f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab2dea698ec0f6e5d77afef2f9981364_JaffaCakes118

Files

ab2dea698ec0f6e5d77afef2f9981364_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.sdata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.textxc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 317KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ