6cafc54eb9f1f8edd7a8aba870cccac8_JaffaCakes118 | Triage

Sharing

General

Target

6cafc54eb9f1f8edd7a8aba870cccac8_JaffaCakes118
Size

644KB
MD5

6cafc54eb9f1f8edd7a8aba870cccac8
SHA1

7431abbd950d29abae893e55f5d242907d9b573e
SHA256

2dc2c2f771e0e4df28b8b539afd9b6ae71084f4be073b7f3ff0bba98f228e121
SHA512

9b4e8c563e1d67a3ebdb2ed4609f1b68adf155caefbbf8218e54e74e4c9d28d51e380c9791f766cd8ae76f861ec0b4c88bc66002a40220c7b3c05dec61b046e4
SSDEEP

12288:Zl8klHeJTjhAX1T90fw/bTHDV+IZevFlxRLBa7mQj:ZxUC/PD7ea5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6cafc54eb9f1f8edd7a8aba870cccac8_JaffaCakes118

Files

6cafc54eb9f1f8edd7a8aba870cccac8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 456KB - Virtual size: 455KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ