cf6643b6c6f5644750e75ee7bd3f03ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf6643b6c6f5644750e75ee7bd3f03ea_JaffaCakes118
Size

1024KB
MD5

cf6643b6c6f5644750e75ee7bd3f03ea
SHA1

cfd3ea0813c88502f08ed7952b7c0943fcc42755
SHA256

e6530df14db710aa844cc29aaf12e7a093eb43b1f74195630f718f5156bfa2e3
SHA512

0c15d9adfcbe16f04090ce1b24e00b08a50fdf4e42c2f70f8239dacdc4f7c5e62bf4903541f70c9ef19469dad2b714e8f786f814c8af298dac8622b4fc7ffe3f
SSDEEP

24576:1L1qYzGRVm1Cl8UFfz0SpzZDyn9zNxtVMeciJb3bYU:1kGG/0cOzXteec+3bY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf6643b6c6f5644750e75ee7bd3f03ea_JaffaCakes118

Files

cf6643b6c6f5644750e75ee7bd3f03ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1012KB - Virtual size: 1011KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ