6f897cf88f5d161a5e3a15396409a9a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f897cf88f5d161a5e3a15396409a9a2_JaffaCakes118
Size

123KB
MD5

6f897cf88f5d161a5e3a15396409a9a2
SHA1

db7ce180fc645750881a72e81e6a40b221761ed1
SHA256

34fa6087916867a9cc218a896cbba38c0879bb85d9f1e0c4e0db4632baf38f56
SHA512

0e734bb8c42f60d4bcb177bd2c5ca14a0e33067afcb30ca016a5a3760f3fce05e56dfeede39ade6fc4198243ce461d6a96fc9cf76518a4bf5fe9412d7bb1780b
SSDEEP

3072:iR3wJr+pZeilq6mcy8NqEcWNKFbVubhNwR0TqL:9wpsrwRhfbbh20c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f897cf88f5d161a5e3a15396409a9a2_JaffaCakes118

Files

6f897cf88f5d161a5e3a15396409a9a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 171B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ