JaffaCakes118_6102daa4935e016dea8dc3eec27d2ac1 | Triage

Sharing

General

Target

JaffaCakes118_6102daa4935e016dea8dc3eec27d2ac1
Size

479KB
MD5

6102daa4935e016dea8dc3eec27d2ac1
SHA1

c5320bd4d54b856aa90bc7a92ca9ce5dc22e70ca
SHA256

5d192cc1e5d9569479192b9ca7147953428158484ab4f5c0480ad220688fbfce
SHA512

92d0683cc73ea1479426a5869cc66be21b28482069af8c8fceb69ea183d978d5f600323011c7944a1b618b11e3a56d4371aaf8dcc3238098c4388eccd5115b51
SSDEEP

12288:P2yRPHfLlUN7Fl1dYySBrNoZZDetBHGTRNj:97wAySdNorDgBHGTRNj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6102daa4935e016dea8dc3eec27d2ac1

Files

JaffaCakes118_6102daa4935e016dea8dc3eec27d2ac1
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 450KB - Virtual size: 450KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ