f06bd65dc9ad4be2606ce20f22aadcf2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f06bd65dc9ad4be2606ce20f22aadcf2_JaffaCakes118
Size

9KB
MD5

f06bd65dc9ad4be2606ce20f22aadcf2
SHA1

898822c01bea1be6d250a6628d87d710cc86d7c5
SHA256

f1fa6f590626b7f61202676322f336cae5a805785fb2fe2c322fa7f6ff57a23f
SHA512

c237f8d696455e75fb4224260ca26e484b8cafa57db2eac6b3c286a6230488d6c0c538a1d65f9a55159a5cb6ff159e820e55ec6ffe2a0db41a67f40589f4fa8f
SSDEEP

192:0BksuzPY82gQv5F4otPeMZZ3o93VnjdwCzX3YcB:E82l4otPeMsFnhwC7f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f06bd65dc9ad4be2606ce20f22aadcf2_JaffaCakes118

Files

f06bd65dc9ad4be2606ce20f22aadcf2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ