6dda1459c7d4357f8e6b3f775ac00cb2_JaffaCakes118 | Triage

Sharing

General

Target

6dda1459c7d4357f8e6b3f775ac00cb2_JaffaCakes118
Size

1.0MB
MD5

6dda1459c7d4357f8e6b3f775ac00cb2
SHA1

b4f1d480f20d0079b65357b83ab1cba365ffb83f
SHA256

b7aa2ae9fb024e7f3dfe47cda49ffdcbfd134ff6949d065d95efd2137b4fa253
SHA512

eec108b3f5310ac6980f5d2de066ac8226f0542d31b652b6fe0da87ded06ef91a02fc2c48a86b6daf408ffb1af2c259b986489c258f9c27478051920c56bbcc3
SSDEEP

12288:WHRtLVzQxNwrE95+4EivZLJIG//bNXU42ajZ:yRtJIwrEz9h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
6dda1459c7d4357f8e6b3f775ac00cb2_JaffaCakes118

Files

6dda1459c7d4357f8e6b3f775ac00cb2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ