d1386f9a7e1540d02d741b3f8e48eee8JaffaCakes118 | Triage

Sharing

General

Target

d1386f9a7e1540d02d741b3f8e48eee8JaffaCakes118
Size

258KB
MD5

d1386f9a7e1540d02d741b3f8e48eee8
SHA1

0557640e3c75ec744e5fb900e4f67cca31a1c60e
SHA256

4bdeea73bdcf4b542ff19ca8f9b5a7fe3ea1ec717bbcd9dc3356e0d66d778468
SHA512

962420b19c8c2a86cf1bbb36149b21847dc362a92b6ebada40c68fce32b997049963104defde56df5aade1f35e3f88cd9c5f292cd37f94aefd191205a8f5a784
SSDEEP

6144:Q67ujrMy4wrrVCfOrr/rne98W6Bohv87tLWpLG36r0wwaZ4G/e9nkeeUAM:Q6u4y4qrr/r4p4ol85Dcw846e9k8r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/COAs-DOCUMENT.exe

Files

d1386f9a7e1540d02d741b3f8e48eee8JaffaCakes118
.gz
COAs-DOCUMENT.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 487KB - Virtual size: 486KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ