f6cb6eb02235981971620899d88aa337_JaffaCakes118 | Triage

Sharing

General

Target

f6cb6eb02235981971620899d88aa337_JaffaCakes118
Size

416KB
MD5

f6cb6eb02235981971620899d88aa337
SHA1

912eb370190e513ebb0a130bfd2782a4fc2661bc
SHA256

8b334c052aa35c751a90affd750f2f0522fe23c68ae332cce60d4c1337a61261
SHA512

98cfda3bb8c3bc3c98ff3e577076212e2cc5c3b7379b73a1596bf00371ce5712ecd72e6986d6c67fe89db7adba51c6608c3b86473ec8a6336eda4520776cd50f
SSDEEP

6144:GA3TDL3TqokDj/ZyqigHv8qXwuTdJPCRIhlIJl5gAI8OCYrNRaq9qh+3tLglf:GSXkAqiOvKpRPJfgJVCK9glf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6cb6eb02235981971620899d88aa337_JaffaCakes118

Files

f6cb6eb02235981971620899d88aa337_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 413KB - Virtual size: 413KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ