6166fe138a0fc12894d1f7302dac2f0a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6166fe138a0fc12894d1f7302dac2f0a_JaffaCakes118
Size

514KB
MD5

6166fe138a0fc12894d1f7302dac2f0a
SHA1

c1493390dab04e2652a5c7898df9afed17d952c3
SHA256

c176953e27fcedf11dc4d33a8de63e370d74451ac1381bf3fa7e1be0d528177c
SHA512

e989fa89602b35ebef0630a3391a43c02e0a451000d855df16199e7e8626195767c12dede916cb22873052e11506c16349df89713320103b477eb0894a7904c6
SSDEEP

6144:m2C/64hyMBnuRmrMtcaanNDdPR5T2G7vZvtTx8h:mj9hyMBnuV6D9R5T2mvRtTx8h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6166fe138a0fc12894d1f7302dac2f0a_JaffaCakes118

Files

6166fe138a0fc12894d1f7302dac2f0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ