ea403e1bb4a9cf49271f3db52713a1e4_JaffaCakes118 | Triage

Sharing

General

Target

ea403e1bb4a9cf49271f3db52713a1e4_JaffaCakes118
Size

934KB
MD5

ea403e1bb4a9cf49271f3db52713a1e4
SHA1

53f7b70ebc686e242db4c4697d6b2cc43136e304
SHA256

43649db543f21ac9af73d9f7e301935f29cb93d0d10050253fc552842129dd0b
SHA512

baff86e292933f1289d4a5e043a9cf4e6088146fe3ce9f02d75a828dda3176c5314fbba60afdd81aedeb1bd630afc78e58756c5f5079233a298fb4cb4d30ebdc
SSDEEP

24576:PuBeHtiJMJkpuq0Ua/E7QudIC158NWo/NwQWSRn6qkq:2wNEMmpuUas7dx5qVwQWSR6qkq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PDF4563784.exe

Files

ea403e1bb4a9cf49271f3db52713a1e4_JaffaCakes118
.rar
PDF4563784.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ