6020222d0c052b2ddd951bf865f265b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6020222d0c052b2ddd951bf865f265b8_JaffaCakes118
Size

280KB
MD5

6020222d0c052b2ddd951bf865f265b8
SHA1

4b6d032114670a7fa01f9de9da6fb7a46d7de1cb
SHA256

b759f0582b45a79ae694cfdbc50e559c05894b008b2962a477f8d74d64c383c2
SHA512

4995af6c325de99df8d6545b89ec4c7beaf941cc97e16fb9a25b48335f18059d0d08f8752150a8cd8eb19d3e2f3179559d167c7b7e3d8a83697259e7027cb831
SSDEEP

6144:J3dZTB4BBt4p6XwZTXz/3mB3WlYt1eeCLVkkiTSUS:TZmtMXze3nt118VkkitS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6020222d0c052b2ddd951bf865f265b8_JaffaCakes118

Files

6020222d0c052b2ddd951bf865f265b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 268KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ