6676d6cfb36879bb0be0fd2a5e4d64a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6676d6cfb36879bb0be0fd2a5e4d64a7_JaffaCakes118
Size

959KB
MD5

6676d6cfb36879bb0be0fd2a5e4d64a7
SHA1

898039881d72399627a00acf07ca0d8035701353
SHA256

f849f9bae59620ff9b2e0ff8b23d03337ed55eb70f94a91c67c295f4060f82cd
SHA512

b79b2f6e2b116ddc0dcb8d689e2d91be12468570d9532a8fb739737edb383bbc34a260f275f14226e3bd502d4e58a8a6b351005f519a2f158ca005688c5c5135
SSDEEP

6144:yTkth0AJVLxep06rsqfep06rsqLep06rCo:KU2Adeq6YKeq6Ykeq6u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6676d6cfb36879bb0be0fd2a5e4d64a7_JaffaCakes118

Files

6676d6cfb36879bb0be0fd2a5e4d64a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ