6179b6892c4da959bcec52c4e394e764_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6179b6892c4da959bcec52c4e394e764_JaffaCakes118
Size

786KB
MD5

6179b6892c4da959bcec52c4e394e764
SHA1

b55ba31a0a5bb9d6641589e6c527fbb36ded5f2f
SHA256

126b02998d816389ef89e5aee0ed343464267fefca2f5d6a4056b81394eccafd
SHA512

5fef269d23c9c557407ede16e767331b2ea08575361798d87cabe383d5e31b6717b80c84a4ee6244c2954a4561fdce544833ab6fa42677931983eeeae1724fee
SSDEEP

24576:RSLdRQOomDV/FOoKh6e/QMNUiA0x3nRM5goFS:RSRBxMh6I+f0Zn65goFS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6179b6892c4da959bcec52c4e394e764_JaffaCakes118

Files

6179b6892c4da959bcec52c4e394e764_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 754KB - Virtual size: 753KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ