14ac6085a1aeed6524330d5dbed21683_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14ac6085a1aeed6524330d5dbed21683_JaffaCakes118
Size

302KB
MD5

14ac6085a1aeed6524330d5dbed21683
SHA1

ebb220b057453dc12a569227afa748d38efa11be
SHA256

f099d27d8b06291a3c8aace4b6f46eff2f229040d14765e34a28386fc33952a6
SHA512

a23555303cca0b44cdee1c84ec0ce1d15fbda20d0716a9e6577bb2f032cf078d37ce39d79df066a00bd3ede643bca13b156209f8f82ec4371591dc8e0c281c73
SSDEEP

6144:5PNMCmiSCi21Bz+RksQUSv3aT0tJ/CiT4LKvgsv5pe5t+R3IIhIIW:5WClNZzxlhv3IiJ6iTnFIIhII

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14ac6085a1aeed6524330d5dbed21683_JaffaCakes118

Files

14ac6085a1aeed6524330d5dbed21683_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\packar\Bureau\Obfuscated\Setup.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ