0b498aa8fb3eb29f17573f9c4195220e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b498aa8fb3eb29f17573f9c4195220e_JaffaCakes118
Size

236KB
MD5

0b498aa8fb3eb29f17573f9c4195220e
SHA1

318f414a9b673047259a0527fb33165180e61b77
SHA256

ba6ff441c572d317eb72c255f5b31dda68bf46d1fdbf7f5cc96ffeb1db9d9bdb
SHA512

2565710811b071325569b391e6d675c6b2471db2e277f1cfc02f930c31d830a4207ae9115ca1cd88ee42fe91a1b1f3ff17dd4bdf78f9f65b2094be3a26c682c1
SSDEEP

6144:dTvJR4uY0+7ZzX0QXPh/GFXliIQ/RHpHJu1UQhjjZugCA:dLJU0+7Zzk6PlG/QfHJuCAHwgz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b498aa8fb3eb29f17573f9c4195220e_JaffaCakes118

Files

0b498aa8fb3eb29f17573f9c4195220e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Mr. X\Local Settings\Temp\521vzk4c.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 220KB - Virtual size: 217KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ