6274c8b29d3eb313dbc9a1afcca7d958_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6274c8b29d3eb313dbc9a1afcca7d958_JaffaCakes118
Size

301KB
MD5

6274c8b29d3eb313dbc9a1afcca7d958
SHA1

a0800684110ab74c7724317653886181e535649c
SHA256

82f6baddd7482e19a55a52433782d7c7bb387ae621a97e648fb4160f128ed4f7
SHA512

27fa5fb2ad61b6d1947c3c47fa050269c427b46f9e80c87cace087a00efa94b25c032c594d644d1e6820013398418777fa5575cc929168e484d621c900d49b42
SSDEEP

6144:mrTDPNaGvTZgZMnNQHHMHHH9GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGX:w7z7ZgI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6274c8b29d3eb313dbc9a1afcca7d958_JaffaCakes118

Files

6274c8b29d3eb313dbc9a1afcca7d958_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 223KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ