6e6171c90250aee64fef47e1190c8c72_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e6171c90250aee64fef47e1190c8c72_JaffaCakes118
Size

144KB
MD5

6e6171c90250aee64fef47e1190c8c72
SHA1

375a894897b7aed19237d2d7482ca26105a0c2a6
SHA256

14c46f07fde7eac152241a1a81dcb25f55b3373d428aaa2944a8b7127d32c741
SHA512

25d2e24c3369ec7ef2edb18738c680d7c14caebe1f23fa7cd335f098669bfd4911d09ecdb8e2eb3cf9218470bd461c721fa4a8954701170d97b4bb3615f61674
SSDEEP

3072:tp1+jp6hU/0r9Z03xpm32GhNvfRz2BSNQ:rIN6m/s9ZYE2GhNXRz28Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e6171c90250aee64fef47e1190c8c72_JaffaCakes118

Files

6e6171c90250aee64fef47e1190c8c72_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ