06d6ca384053774aafaf77b4bbdd1917_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06d6ca384053774aafaf77b4bbdd1917_JaffaCakes118
Size

1.4MB
MD5

06d6ca384053774aafaf77b4bbdd1917
SHA1

7243bfc02b388dffcc5a5d236796bc568c8d4ce6
SHA256

ccf9011c833e4e7bcb5160c3db04a592ef32a21d1a23714b4423dabbec639ac8
SHA512

e892f01f2fb0061732f2a2535eb02c664697377d1521c68c5e3cee45fff0fb5cf80dc58b2861c26ac8ac5a48279146a600e6d5b1f370f2e15ce0f38c8074e36b
SSDEEP

24576:c7CLDF3J+4T+fZnNQwfhL99AfEn9nPKlW7MFmbh8nlzM4+5sVyPer/VsbNFONU6k:aq3EjZn6wfhXAfEn9SlSM8cmIg6QFO+1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MrFishIt.exe

Files

06d6ca384053774aafaf77b4bbdd1917_JaffaCakes118
.rar
MrFishIt.config.xml
MrFishIt.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ