6a434d8dec61c81dcb8e1ee4c9d45aa5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a434d8dec61c81dcb8e1ee4c9d45aa5_JaffaCakes118
Size

48KB
MD5

6a434d8dec61c81dcb8e1ee4c9d45aa5
SHA1

1a244e8f1d10928d38e05e9b0737de0029a617b7
SHA256

50d4049606b72f98a463ee658d1ccae2bcbf9897904168bb5cb981c895ba691a
SHA512

5420dcc27de87b40fd2d71f672c32f652708c9369ee183b01c6bb368ea96d3458b5eda9dcf9d86d12f69cc31eb842a86098451ee0568d84970bada74df60fe15
SSDEEP

768:erfPkIJkPB2pg5aD+Qy05JXSBO814scXmYg6LQup:eDZa5aD+vsJSvCmYRfp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a434d8dec61c81dcb8e1ee4c9d45aa5_JaffaCakes118

Files

6a434d8dec61c81dcb8e1ee4c9d45aa5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ