6faa90aebb8e8160971360838e384f3c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6faa90aebb8e8160971360838e384f3c_JaffaCakes118
Size

409KB
MD5

6faa90aebb8e8160971360838e384f3c
SHA1

8c77c2a33cbd4350bac048a719826aacb6ca2d17
SHA256

4d123a174ffc00f6c2dcc0ceedf913c9b4743cee81ae36216cc695dbc36ad067
SHA512

f9a131f3379ea8260c5825b0b7f75baf8542a02ca49ca0b3bee0801bb944d364c01bb5aa315f2b0a2cc37cebcc16944f5d971f216a2f124860ae9e64105b996d
SSDEEP

6144:XQpxyN90vE2kTfE01hOs4AmXA8XYMj6YWR4XSX+srS7v/OEbnUyG3TMXq:Xwy90aLzLOS8URd0L9GD3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6faa90aebb8e8160971360838e384f3c_JaffaCakes118

Files

6faa90aebb8e8160971360838e384f3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\work on it final\cambridge\cambridge\cambridge\obj\Release\cambridge.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ