d16280d734875a575e7c92aa0d831926_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d16280d734875a575e7c92aa0d831926_JaffaCakes118
Size

516KB
MD5

d16280d734875a575e7c92aa0d831926
SHA1

080d4463fc0bf87f2083f11ded8ee295fe3f6976
SHA256

36d87532edad3b1f21790b9dcf8cb6ed53b66a4a2efd9a8cd37380f45e6cf1f0
SHA512

36bb6801f5e29910e860f85be37ccd9eaeb4a5a099469179d90aaf24585129e79c5bc0fbabeedd356d7800855f5b2638eabae057e24b34325a4c7a1dfab4ff7f
SSDEEP

12288:TdwDGO3nIrNcaHwnH11G40xLddsBWe/ZeRQT/zVxNNE:hwD33nIrOaqHO4gLdmokZe0/L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d16280d734875a575e7c92aa0d831926_JaffaCakes118

Files

d16280d734875a575e7c92aa0d831926_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 504KB - Virtual size: 500KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ