6be6af5aff7b5caa290a1a180a679277_JaffaCakes118 | Triage

Sharing

General

Target

6be6af5aff7b5caa290a1a180a679277_JaffaCakes118
Size

1.3MB
MD5

6be6af5aff7b5caa290a1a180a679277
SHA1

09e97d9ee3ae05ed601a7d7a204d55e5f51d4531
SHA256

2456a7bb71cc0d7ce6dbd5791c313ea0a51ac8a491ac5d9b5ecd2b532a23f660
SHA512

d978117bfc8823215e23f87aa6e4f7b055598a65762a796fe209cb61ab3773ef87e5374284514dd6b7030752405e36248168a2b5aaa9e09193183bbaeb0264b2
SSDEEP

24576:1YUnFWo3oeT3JPbAmjuBVi55adQAftWhc+J:1dnFp3oEZdj15DAfYhc+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
6be6af5aff7b5caa290a1a180a679277_JaffaCakes118

Files

6be6af5aff7b5caa290a1a180a679277_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ