6af70323e5f57abd8813ef7832af6545_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6af70323e5f57abd8813ef7832af6545_JaffaCakes118
Size

772KB
MD5

6af70323e5f57abd8813ef7832af6545
SHA1

729cbbbfb0e3cb9b8f7a3402f7c57f943140eb9e
SHA256

424b07b596c60cf9f2060ee428591e70273609a156f8e6195db488b06ee813da
SHA512

2638ba9cc555b30c976f423824031ab05bb9fceafb8c019369912fa8af85f6774c80be9c9def907c3edb79eb45955025a7c14565d71c3f19ddba111e67537654
SSDEEP

12288:Dnia69cksNW5Dx1wWZQ+aIJaBQ3ep+Lt6Z0OH3zuzNi:DnJmNhZgIu4eqjOXgi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6af70323e5f57abd8813ef7832af6545_JaffaCakes118

Files

6af70323e5f57abd8813ef7832af6545_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 760KB - Virtual size: 756KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ