b0f1185e163b3c0da465f3cb4a00e96e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0f1185e163b3c0da465f3cb4a00e96e_JaffaCakes118
Size

364KB
MD5

b0f1185e163b3c0da465f3cb4a00e96e
SHA1

b1bc09daf20c93fde19943be105af8dd2a03273c
SHA256

10eb16cc07efcedd4460b858a81ae14e678f06d89e3f94614ff399c5666607f3
SHA512

c51dcf52009c55f6bfe4992b6f3ec54a94ea0c13886cd181b8ed5b0c13966459fc2e0409508b7ab79817d10dfac83089060975a10d892c22a57cd88dad942fea
SSDEEP

6144:O3yEAHhhFnZAxwPkLsGMAjduKFwpR+5YluD3BHftm4veoPk3CgRPtQw3B3lHRDqy:GyjCWkLWuFwpRSYluIocJRmGlTArO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/INV-20170806-0092795243900-29178.exe

Files

b0f1185e163b3c0da465f3cb4a00e96e_JaffaCakes118
.zip
INV-20170806-0092795243900-29178.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

mscoree

_CorExeMain

Sections

.text
Size: 891KB - Virtual size: 890KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ