6e511195546b96e0ce192a96d8b70a7b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e511195546b96e0ce192a96d8b70a7b_JaffaCakes118
Size

205KB
MD5

6e511195546b96e0ce192a96d8b70a7b
SHA1

c5c18dc12eb62267d68784729c59eef0c483b3e3
SHA256

7cee78776f519a7c6b063fd5b068ac0fa5da2c2153a241d745d28563d6bbdf53
SHA512

eed9f13cfd4771c9ef0bf04a46762de331e2ef07af4e17f239e16c86958dfc99feede7a7392ae2821659f8ba41f7c93e72554b49e583c4559a804992c53a6a7f
SSDEEP

6144:gR867Q/F+zocYyAxgKBCrimLEpN8kk1u:x67ISoLHxgnapN8H1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e511195546b96e0ce192a96d8b70a7b_JaffaCakes118

Files

6e511195546b96e0ce192a96d8b70a7b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ