ac910d2ecdaa49023ae56bf5f1469720_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac910d2ecdaa49023ae56bf5f1469720_JaffaCakes118
Size

4.5MB
MD5

ac910d2ecdaa49023ae56bf5f1469720
SHA1

20eebf75899cb5e15c70345599412ac969e77e6c
SHA256

8c57fecebd118aed2e743adabeb4f0f77171ddc8c7dad8f67df5d29684907914
SHA512

81e0bcd152ad55b81ef49fece2c9c2b6f339ae44012f285e4f3c57475de1fb9c95c13c1dfb3d9576145028b20a526d90379444ef0c82670497cfb6888b93a5b7
SSDEEP

98304:Kis8QCma0dM2INStUuq2B5T8vj7G/I6dszvepmjQyPpJE:TKRM2HtXq2n8vj7iPges/Pp6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac910d2ecdaa49023ae56bf5f1469720_JaffaCakes118

Files

ac910d2ecdaa49023ae56bf5f1469720_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ