4006f2596acf0e7b6f06a7a5913a1b58_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4006f2596acf0e7b6f06a7a5913a1b58_JaffaCakes118
Size

155KB
MD5

4006f2596acf0e7b6f06a7a5913a1b58
SHA1

c45099bc96c89e2acd25bddb76a67526859faabf
SHA256

169e51c9590354655b7105c96c5fa4ec957ca8313d517ccda571e449e4c74011
SHA512

e503e7cf1876a8844c94dddc1f2f5abef3b7ac4b8a1f83ce1c6edf8b9eb44b2528c6b96847a76681413797d6bc401745db56f1751687aa36922f92d6c3748ef6
SSDEEP

3072:EgYu3EcVaILaTEDzgMQIEUOSVB3+LcbNSmkpe4J+zSt:j9z2InOSj+uEmU+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4006f2596acf0e7b6f06a7a5913a1b58_JaffaCakes118

Files

4006f2596acf0e7b6f06a7a5913a1b58_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ