6980980015bf2879806ecb4f6b0283a6_JaffaCakes118 | Triage

Sharing

General

Target

6980980015bf2879806ecb4f6b0283a6_JaffaCakes118
Size

507KB
MD5

6980980015bf2879806ecb4f6b0283a6
SHA1

3ef57b0a363ef8510fb33f8d5361e227434e2cdc
SHA256

cda2bc8793f428548fdccdc6ddcbb1316cb4c38cedce86269c670b9d8d94c689
SHA512

afec4463cb0ebf77f9b60b222e8f7fa565cc80c0bed75e6184b56ebbde813ac4b9e573aa50235cd33949b3e20684f685cef763a04d1eb1a39bd81abac76c5c41
SSDEEP

12288:g1oaO2uU5JkCtKnPI696f7hGGxp3Lik3Ox3FYGGT:g1oa1JJ4PT6ThGGxpb7OxV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
6980980015bf2879806ecb4f6b0283a6_JaffaCakes118

Files

6980980015bf2879806ecb4f6b0283a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 261KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ