ab2ead9af454e017efc1a243a72987bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab2ead9af454e017efc1a243a72987bd_JaffaCakes118
Size

531KB
MD5

ab2ead9af454e017efc1a243a72987bd
SHA1

c008c5057a07d718b59dd5eb70d00c3a4fb35ec5
SHA256

6568fdb6da1d4800e269d58ad58759d09ce8539d558f4ee7e2ca89fcbae055bf
SHA512

fd099a6fdf419c8a96f9e26480b9f4d0852c59a7fe47f4bc9e7926529f11eacc854583033e90aa3f1eb3e2c4c4ab728de439eb51493e003ac28cb5dda274d821
SSDEEP

12288:Dq6xHpxZSnCJfyAhYzb14dJzCAmQ6d1x34frYMk3:XxZSnyfy5N4/zCAorofrYMk3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/New Order.exe

Files

ab2ead9af454e017efc1a243a72987bd_JaffaCakes118
.rar
New Order.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 693KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ