JaffaCakes118_6895cd6c93e282c5776c902af458cbac | Triage

Sharing

General

Target

JaffaCakes118_6895cd6c93e282c5776c902af458cbac
Size

722KB
MD5

6895cd6c93e282c5776c902af458cbac
SHA1

6c1033e59d7396e8c3116428d1bdf28f6a868bc6
SHA256

ab09a0694b65b155701d6efe5d08e1ed51b45d2b884496a4cb76703605cfcbf3
SHA512

a3d7627447799f1c719daefa0bb3bd73f6986944b5cd391ed30b16ec2339dc6c1d7f52e5f5cd9cfedbc8013ea5c6b552d35ad22237438874f61aaed50085a0ad
SSDEEP

12288:e0RUzZDRJxRW2YjW4WsGs1l8i/8sCHcOtGr:e0RUzN7R4WsGs78iFC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6895cd6c93e282c5776c902af458cbac

Files

JaffaCakes118_6895cd6c93e282c5776c902af458cbac
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 546KB - Virtual size: 546KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ