d328499d63812de11f6e01b4220fc257_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d328499d63812de11f6e01b4220fc257_JaffaCakes118
Size

917KB
MD5

d328499d63812de11f6e01b4220fc257
SHA1

426b4a761ecf79af97e5af80df36421e987be9f7
SHA256

bc24563b2aa97a972da5577920c055e89479129078840f961e2b76593d0a4d40
SHA512

6bacef57d70d5aa0da53235f30e75781e348f48768c00b619db0f92aa0d2d037e96b851c896d45115f705264b2c985d7f7da3ff426093822a61ef9866e5502dc
SSDEEP

24576:9Xrxv4AFMQ7dNX4+FB7nkCDmktx98FnRlqz:5rx4JYLrkCDp+Fnrqz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d328499d63812de11f6e01b4220fc257_JaffaCakes118

Files

d328499d63812de11f6e01b4220fc257_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ