549f382c85cad0531f57aed813a2fa15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

549f382c85cad0531f57aed813a2fa15_JaffaCakes118
Size

124KB
MD5

549f382c85cad0531f57aed813a2fa15
SHA1

e59506fa197de43b850d1c05e7d3f18fee080506
SHA256

9ed7b9405c79331f5fcfa5acb1d0c1087c6ee4500d9d19a9066f974771d4b1e9
SHA512

38ca51beecb4c8b671474bc0a871cc1d1def851e069351db272c0085de74e185e860aca541d61383e00f60074c7a84c0a81a1a9e85bfdc98f851b68ceb17199c
SSDEEP

3072:G/v7xIj0jsCpbIdsJZxm4bseEXc56lId8yTB:MdJjrp6spUeUc5Cjy1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
549f382c85cad0531f57aed813a2fa15_JaffaCakes118

Files

549f382c85cad0531f57aed813a2fa15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ