6a260892c099f42411fa6a5c1f894c40_JaffaCakes118 | Triage

Sharing

General

Target

6a260892c099f42411fa6a5c1f894c40_JaffaCakes118
Size

4.3MB
MD5

6a260892c099f42411fa6a5c1f894c40
SHA1

cdf641fa8f17853780a57a93d4bb83d9e56cd86e
SHA256

2f0ca5c5b50e6daab5d26dd6fe477fbe4e6c925767947b9cbe9a7447fd6aa55b
SHA512

ff862f4f3f64fe215075707d26f4c59aaae87b6871254b5170278a0ce5ec02580a48b218d3b77cf2812f3ed0e02aa4a6d7823cc282a664bf06c3a4965a880d7a
SSDEEP

49152:N5K3SVFDv5VJF7+fxc5voVYT/hB5Wy+FGhtRkkkk:Jkkkk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a260892c099f42411fa6a5c1f894c40_JaffaCakes118

Files

6a260892c099f42411fa6a5c1f894c40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ