6fdb90800e7263182f188f3dac487fc0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fdb90800e7263182f188f3dac487fc0_JaffaCakes118
Size

684KB
MD5

6fdb90800e7263182f188f3dac487fc0
SHA1

07dc8617cb4f9609eb14835c4b7da4673a0deed9
SHA256

7b24780eceb5859ad65c1c341c4e5de1645b704ea3f6da86ae41533d881a0fbe
SHA512

492b85d37bda0e24712efe1f5c2bc22b5db9fe3b7c9cd2e979decba2770160c9c34d275893566349a6ccb6314b59c8af05bd758ae0f32d766297fcf89a8c205d
SSDEEP

12288:KXK0X4pp6E9HEipnCSPjUJYgE9HEipnCSPjUJYK9mzE9HEipnCSPjUJY:JJpsE9HEipWE9HEipc9mzE9HEip

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fdb90800e7263182f188f3dac487fc0_JaffaCakes118

Files

6fdb90800e7263182f188f3dac487fc0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

PDB Paths

C:\Downloads\Программы\packed.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 520KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ