6754e61c1422470f31d99797d8a9b254_JaffaCakes118 | Triage

Sharing

General

Target

6754e61c1422470f31d99797d8a9b254_JaffaCakes118
Size

48KB
MD5

6754e61c1422470f31d99797d8a9b254
SHA1

3c8c772435c34b5afaf3a9eca27e40d4b1389654
SHA256

652a36e3cde6ce29e0a173c3eaa61ef62c6e63f22b1c5e3352c3846f36d9114c
SHA512

dca3d5decb2d745c2b234f434e0008129455fd99e7fe0e349d710ce0cef12a7dfbb8b8426b45c123cd80578aeba3eeeefc801f63fce667c7aed348e7ce17c884
SSDEEP

1536:ZGGLXyYF0CCPCRBEnON03spdmYyXSqZ8s:ZGayYF0jGB0ON08pdmYyFt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6754e61c1422470f31d99797d8a9b254_JaffaCakes118

Files

6754e61c1422470f31d99797d8a9b254_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ