f6b5dcddbaec501597487f7326dfc60d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6b5dcddbaec501597487f7326dfc60d_JaffaCakes118
Size

157KB
MD5

f6b5dcddbaec501597487f7326dfc60d
SHA1

f5fb79de2e1f8b0fe3f68deead0810b346adf86e
SHA256

b2746f8d92420085a093acc5b1e0df5a6a1179b5f8591e85be1e9f3024ecfbbc
SHA512

36089712bfa7d8bbcb055354a9a916d68855a7e4de13be90b5589a3088b7745dfddac5a4b8d10c407a4ecb09eb650c94f3c56024b00e71d226fefaa2f95de270
SSDEEP

3072:73BxrvgGk0MB1dZXV6PgaDW78T8rFYeG:7DDgD1dZXV6Ia7TEY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6b5dcddbaec501597487f7326dfc60d_JaffaCakes118

Files

f6b5dcddbaec501597487f7326dfc60d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ