c51f026c9d7e33819a7316931486f61f_JaffaCakes118 | Triage

Sharing

General

Target

c51f026c9d7e33819a7316931486f61f_JaffaCakes118
Size

456KB
MD5

c51f026c9d7e33819a7316931486f61f
SHA1

603e3138e0b5737adccc73a576812f2610e744dc
SHA256

55a48d18d84f9c95d24fa263972e320b32cda84247bf0e4fa505f138033ec4f3
SHA512

519fa21a5732c5a93cc54be65bf0c017f0e075e175fa23a96ff3423907adae1ecaa1185050a2ac11f10e1e193e375ce667312828c59c36c03b147764862c3b6e
SSDEEP

6144:qtQZqm15Jt86dy5yZ8cqqNyBdlRSz3wUev2Gw:qtsu6dTqxzG3ce

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c51f026c9d7e33819a7316931486f61f_JaffaCakes118

Files

c51f026c9d7e33819a7316931486f61f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\fff\vegan\ONZTAA\ONZTAA.exeCCFEBYF.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 295KB - Virtual size: 295KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ