6025ff94f0c0bf13285c1686bbc19615_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6025ff94f0c0bf13285c1686bbc19615_JaffaCakes118
Size

458KB
MD5

6025ff94f0c0bf13285c1686bbc19615
SHA1

03dcb089a9d25618f9180e1f0a398b83aa6dc80c
SHA256

73c7ab60d3afeeae1cefa759d8870648c958e323e8e9b9cdc2615f47f33ce598
SHA512

c5403f59773b790112b298a5f418adf4288a12d3b46d31ef38f2353eef9bbfc30a0ee0659c448adedd3188d38acfa4d0e34c248522c70d258975038759b9f415
SSDEEP

6144:VihMjS1E44JCQrYHLapiuHjNG5HuIxwfZk:V3jSatYQrYrapBjNG5HGfZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6025ff94f0c0bf13285c1686bbc19615_JaffaCakes118

Files

6025ff94f0c0bf13285c1686bbc19615_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ