2821e579ff363463e4311919475ee2d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2821e579ff363463e4311919475ee2d0_JaffaCakes118
Size

688KB
MD5

2821e579ff363463e4311919475ee2d0
SHA1

bdd6372353bdccaa2bd5a9cbcf295fc7c44dcb13
SHA256

d10d5ad58e804a0e43d814cfffbd9fa95e30f16e2121913ef6105d1579300e97
SHA512

0d9a5506238a1c279e6244eff821fdaea65d6b806dfd8061cd11cf05b42c38d4ceae8f5ac5a5502864a8d90772edba6fd53c5bd25304044a999a4c038de8c573
SSDEEP

6144:2zSTFFRnjYpI1lDiElDGNCnX7VvJbeOpfC46yN+eGJEZZ/Cmf7EFD8eR:2zSTJ8pId35vJDpfC46s+AZUmf4R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2821e579ff363463e4311919475ee2d0_JaffaCakes118

Files

2821e579ff363463e4311919475ee2d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\user\AppData\Local\Temp\eahr5a3e.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 312KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 98B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 364KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ