f80cf8e2df0e8c4b1aa03b9a91c98ed7_JaffaCakes118 | Triage

Sharing

General

Target

f80cf8e2df0e8c4b1aa03b9a91c98ed7_JaffaCakes118
Size

580KB
MD5

f80cf8e2df0e8c4b1aa03b9a91c98ed7
SHA1

6fad81b65120690d5596c01b6e2038b40ec37952
SHA256

12fe89d0b26cbcddb8d6ab034db718afc5a908a76b5bb46502d088536b62361a
SHA512

fa198d9db1136793efc996a7cb4a3b5fd246915c845ff96750c6f3804cc71ee3ea08a9ca31c5f13295e898c8a71e5f23d82a31fa71c03834e9ae186684a80264
SSDEEP

12288:i17eYF3XAAHZ8yGkhdwdzFGuBGUk/uQlLLacIRF3dHk08N+h4fICh4S92Ok5qLOU:S7V3Xl4dvxk/xl6cIX3dbz/Chx99gqyU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MILLS NEW ORDER.18022021.exe

Files

f80cf8e2df0e8c4b1aa03b9a91c98ed7_JaffaCakes118
.rar
MILLS NEW ORDER.18022021.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ