JaffaCakes118_3b9820f0fb9ea340355f650dfde7766c | Triage

Sharing

General

Target

JaffaCakes118_3b9820f0fb9ea340355f650dfde7766c
Size

857KB
MD5

3b9820f0fb9ea340355f650dfde7766c
SHA1

a68289c5354e903f6a2eeae07b21b4277d33af0b
SHA256

c6e5a0043782537ea8025fe9c1be85bd55e2d6a8b27d397c8f941cad39a4ff28
SHA512

96c75005a14a9654c6f29376b6790b56c91f9c32f3a92cddcc3ff3c701ee7e54ec8e547b327e21f41468df08a641296554ddad460f907c707dce0421f6a90e96
SSDEEP

24576:jl9vWSPpmEPkpnT+uoet711bfi/1/CUMjvW:PeSPpBkZTfzMAW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Eigene Bilder/Foto214.exe

Files

JaffaCakes118_3b9820f0fb9ea340355f650dfde7766c
.zip
Eigene Bilder/Foto202.jpg
.jpg
Eigene Bilder/Foto204.jpg
.jpg
Eigene Bilder/Foto211.jpg
.jpg
Eigene Bilder/Foto214.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 452KB - Virtual size: 449KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Eigene Bilder/Thumbs.db