a6a5a6bee696af914e7970a6b9a27bca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6a5a6bee696af914e7970a6b9a27bca_JaffaCakes118
Size

13KB
MD5

a6a5a6bee696af914e7970a6b9a27bca
SHA1

367306dca76f6c34137767e25255867db57b786d
SHA256

85f709d23d6d888adfeeeeb32d6f9c33c97f499afd814d6581f72379b8711dec
SHA512

51acd1e38bdad46bf134501ef7549b11d6633b316280f2513070f016c678ce1dc04a7bb13b5ec765508a320dcbc4f556721f1721adebac5a0c47c5fbe2bf9994
SSDEEP

384:BXKkjlMfYPDFcR5lLo6QFaUM5rDax1zgMb8:BX5Ge8TUZ1V8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6a5a6bee696af914e7970a6b9a27bca_JaffaCakes118

Files

a6a5a6bee696af914e7970a6b9a27bca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ