fccb6060f63f6dcd980b2ba57fecf063_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fccb6060f63f6dcd980b2ba57fecf063_JaffaCakes118
Size

652KB
MD5

fccb6060f63f6dcd980b2ba57fecf063
SHA1

ba7af96aa4ad56f4854ee8f1f4427ab078f863e0
SHA256

e0d38c65c9127ba0459afc233b03fb301d8350deb458e017322a40c566af6a0e
SHA512

a8e2c550baf441e2d483a757dcdc7b5c7b79ad6fa63157a2ba09be83189a9441e193e8994795d6ce4156b7bf69b39453eaf07ab980134b7828edb0f69850e97c
SSDEEP

12288:eeETBY2cJBm7vi/mFkw1gMV1/O4Kgh3qjCRl3wF:IY2r7AmFkYTVdOm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fccb6060f63f6dcd980b2ba57fecf063_JaffaCakes118

Files

fccb6060f63f6dcd980b2ba57fecf063_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 640KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ