JaffaCakes118_6d1bc3e20a8a3fe2bbb0113e2be23f93 | Triage

Sharing

General

Target

JaffaCakes118_6d1bc3e20a8a3fe2bbb0113e2be23f93
Size

468KB
MD5

6d1bc3e20a8a3fe2bbb0113e2be23f93
SHA1

38d6bee1db08a6ed22efafa166783bd79f95c3e5
SHA256

2a27b69a8e2756b855d42c65a556e641407e48a363f612bd9dcf8f049bcad94c
SHA512

ea12274ad563d1ad25b6f4bcc5f4b38a6c762b824cc26ce83e74bbd3e6e09ff76828817b6c97d886b20a7498eb53625e3a904f8fc59f93fd2f0a75d24e74aa1a
SSDEEP

12288:OXaR+pvRDAvW8VsAN55cKIo+mat40of+cSbggLzI:xR+peh35qK054INjLzI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6d1bc3e20a8a3fe2bbb0113e2be23f93

Files

JaffaCakes118_6d1bc3e20a8a3fe2bbb0113e2be23f93
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 456KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ