604b0f7c2d034e3ebbfb10467ebe643d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

604b0f7c2d034e3ebbfb10467ebe643d_JaffaCakes118
Size

580KB
MD5

604b0f7c2d034e3ebbfb10467ebe643d
SHA1

e6f1b04561dd1b81268334950e9fc36a753b7478
SHA256

76e3bc303d10df38246d63406d33c52c3759b63b0b3d9a43ef3b87d079bfdc30
SHA512

c0c0a87d32396a80895f9df66cfa0f0e8866fec760440c76717fc13c20aed69240c8529779f501fecee4cf647fe858730ee71ace1ef19d46444df984b21220d6
SSDEEP

12288:TXTuxTYyNCYusVDpAfzbDYVE1Kb6jRGDzzsrzs8oNx:mTb2sVDtVE1KW0D/u1on

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
604b0f7c2d034e3ebbfb10467ebe643d_JaffaCakes118

Files

604b0f7c2d034e3ebbfb10467ebe643d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 508KB - Virtual size: 505KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ