b476a37c3992435b0fa0bb5a405dd102_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b476a37c3992435b0fa0bb5a405dd102_JaffaCakes118
Size

118KB
MD5

b476a37c3992435b0fa0bb5a405dd102
SHA1

eac0f771b2bc88041dfc0ad101eef1ec5cd23ef9
SHA256

77d426d73e3aeef4eb5f1ccf5e3815f52af9c4d6b86d43cc5533548a0ab764f7
SHA512

87b9dd1b42ad4500803efed77775f50e3e1626fcfee8568a6f35c28a39b9c31fca8c53c282027ce5904f6e63518c4446446052de8d311f8b919b17e6b6fb2df7
SSDEEP

1536:rOnNyUNVeDc9HCSaLcimY9T0CSCxjiRfvkVBat0AHeIjaFNmN14CR1RmRSR35ZRz:eNVwSJSSNoXLtgXMu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b476a37c3992435b0fa0bb5a405dd102_JaffaCakes118

Files

b476a37c3992435b0fa0bb5a405dd102_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

valentina.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ