JaffaCakes118_6bcda020c480cf797830fdcce28745a8 | Triage

Sharing

General

Target

JaffaCakes118_6bcda020c480cf797830fdcce28745a8
Size

385KB
MD5

6bcda020c480cf797830fdcce28745a8
SHA1

77ba5c0afa12731ab8fcf9f9dfe9977b4ea3ac36
SHA256

7036625873b6f46b4f5785b99ae9109d1baef350157c0fa6b96090d7be7b8c0b
SHA512

d25eccdfc19ed96a3d2b86bc7a3479ed9fb2e958bd4d2b01407690867ac3f1f60e24bbde4769dc7ca61b7992975cab2a02833fc6e249abf6affb3fd78e01b423
SSDEEP

12288:3/n1Y9EKnSu5yVzo6P/XLdszJcwRFW8B/iYvwdDEgiWcSgD:369EO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6bcda020c480cf797830fdcce28745a8

Files

JaffaCakes118_6bcda020c480cf797830fdcce28745a8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 383KB - Virtual size: 383KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ