b6932223425c03912953b293cb31c7fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6932223425c03912953b293cb31c7fe_JaffaCakes118
Size

1.3MB
MD5

b6932223425c03912953b293cb31c7fe
SHA1

d192e0897aa2d07f58414e3344ecb013ff6dc1c8
SHA256

d00dae9ed2de7c8bd97fa9de84e267251c34b41fbdb6a1d88975359471600b83
SHA512

65802baa10a618eccd07c97da13e88efd19accb46e5bbdaa2e8a258cc8454a76996cefe00e84fcf3250cfd424bb7acfc6478eb2c585c52fe6b563fc33b141415
SSDEEP

24576:JPtGPqq0JT0HAbvrIw2A6PoTBAaLomjDAaKcmQs4:JPFVjMy6baLVj4cmQd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6932223425c03912953b293cb31c7fe_JaffaCakes118

Files

b6932223425c03912953b293cb31c7fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1001KB - Virtual size: 1001KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 349KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ