a6439311dad69b0e477020d1e9a9c0a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6439311dad69b0e477020d1e9a9c0a6_JaffaCakes118
Size

82KB
MD5

a6439311dad69b0e477020d1e9a9c0a6
SHA1

5d4aa81a9539732a8dd7bc974c58149f56232525
SHA256

059e671ba409449df9972249a735ec0e7d40b40acdbf16d39c01c762fbf8a711
SHA512

2373781a90496ab0280ff966018b1d23bdede10e0cce7df8af32c041efd5a5471d9f14731005a10c7072687cb332d7b63a8db7240df021ba47bf48d9858f82b4
SSDEEP

1536:ruNO9LDDJhMGZe4DaWflt9dixEkLypYvr8KWQJ9unLP:rDlDJhMGksaCkLypYj8K9J9unLP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6439311dad69b0e477020d1e9a9c0a6_JaffaCakes118

Files

a6439311dad69b0e477020d1e9a9c0a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

IIr|]^
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ