6574e4a7db94521146cdff1e0756ec80_JaffaCakes118 | Triage

Sharing

General

Target

6574e4a7db94521146cdff1e0756ec80_JaffaCakes118
Size

338KB
MD5

6574e4a7db94521146cdff1e0756ec80
SHA1

8b2a05ca53cbffe0cae4af26fb5a1d2073d761e1
SHA256

c4a4f048d4a44b2a9b7eb7c7e4881198829ce220d49dc7ee96e24be3d9043aec
SHA512

bae8a27073de0023c8d6bacf5dfe0ab68194874931159e1104a2780f2746981ef639085c42d100776b99f580563251043a131d06370543adf32a027c2c9dd6e1
SSDEEP

6144:2NLW6ZBGyzW/NLOtcX7DUtF3bcWBVPh/aghiahXS6oNNLaXIYE:Mi6ZEJYKc3gASpqyNNqDE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
6574e4a7db94521146cdff1e0756ec80_JaffaCakes118

Files

6574e4a7db94521146cdff1e0756ec80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

'Va8q,
Size: 255KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ