a6fa52baac45ab06a8cbf6662e5fd3c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6fa52baac45ab06a8cbf6662e5fd3c2_JaffaCakes118
Size

139KB
MD5

a6fa52baac45ab06a8cbf6662e5fd3c2
SHA1

0abf7adb7162ca5b6cfdd376b43e670cc52c6cc9
SHA256

841c24a1b6f6be4879872b6ce66c1d7871cee445a4c4db57fb727eb853424bc7
SHA512

1d788c02ae1d0546a4969be74f0a9f82f059d028c2cbe46e544f48e8fbc8bdae22088c6ee67997b03e7eb968d14f2668fefd6405e190516d3d7102fcacd75257
SSDEEP

1536:vMrZUbzaBRYxQlUMHCDZ9bKzawJP9VCS2GD8fkkE:uWvxQlUMHCDZqawV2GYE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6fa52baac45ab06a8cbf6662e5fd3c2_JaffaCakes118

Files

a6fa52baac45ab06a8cbf6662e5fd3c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ