6948cd8594c28e5106f87a3581b8ca3e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6948cd8594c28e5106f87a3581b8ca3e_JaffaCakes118
Size

1.8MB
MD5

6948cd8594c28e5106f87a3581b8ca3e
SHA1

8ef8e33078a5224693e79ed7a0ce54ca5c18abed
SHA256

04591b884ce99eeda43e7f1898db1ed46274acf385f119304c6a8876bee35c09
SHA512

61a3f24da3235902affd6ccc46124eec58c2cdd996d73f277d41ffb76256df4369d346e8d8f2d4338749f7c789a3e7d9586f25de55f737143f42425a5129381e
SSDEEP

24576:aKt1QlpFzPk1CT7nTfBHKiTiEOfGxcLxmxX4QdQ/MFDQz:a5V4a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6948cd8594c28e5106f87a3581b8ca3e_JaffaCakes118

Files

6948cd8594c28e5106f87a3581b8ca3e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ