b32c90be976aa8fe2d5ccfa8f26ce296_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b32c90be976aa8fe2d5ccfa8f26ce296_JaffaCakes118
Size

372KB
MD5

b32c90be976aa8fe2d5ccfa8f26ce296
SHA1

d0b097e19a19c1999fae4a74355871d3d57362c0
SHA256

088b7ce3cbd630a6ddb2bb0ca704f86875e9259669e3ad997454747f1433e28c
SHA512

072fede6f97fa921fd31e59ff2121ce47bd8daeb9d79e120cb5a7b57d7eaec5b24973fc184b8399416621c5a3c60a2ac1d35923b19a93e915681387e502de528
SSDEEP

6144:GUhAnV4sbAqUGvOlJMmdGKUPcIZh3eRFMnqV5PtDRiKKvvfa9rNWzhAPkk93:xinVh9UeuJU1fuRFMnqV5PtD0K5MyPH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b32c90be976aa8fe2d5ccfa8f26ce296_JaffaCakes118

Files

b32c90be976aa8fe2d5ccfa8f26ce296_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\oii544d\AppData\Local\Temp\i3irqnej.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 356KB - Virtual size: 353KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ