aebc6023393affeed48f3121570113c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aebc6023393affeed48f3121570113c5_JaffaCakes118
Size

212KB
MD5

aebc6023393affeed48f3121570113c5
SHA1

bd69e15195e57f881e22e9e2a1ecb35557cab41e
SHA256

69ed10ea961f8d75ecd2a4fe7d3ae8682355bb4ea98ab4623a4f88363ebe0f6a
SHA512

2d63e8a3c7ae59ed57d65af8d29b15e0c89b3ab739441539256d58c75b9d20f58383bba62c77278f66cd96e265dc5191f2771375e370798752603b308d76ec29
SSDEEP

6144:UPNTcPK+IsOKhQQL9CXsv5pe5t+R3IIhIIW:UZctOKhZL9CsFIIhII

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aebc6023393affeed48f3121570113c5_JaffaCakes118

Files

aebc6023393affeed48f3121570113c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\packar\Bureau\Obfuscated\Setup.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ