f5429e9d0b87173062141225c6ee9137_JaffaCakes118 | Triage

Sharing

General

Target

f5429e9d0b87173062141225c6ee9137_JaffaCakes118
Size

144KB
MD5

f5429e9d0b87173062141225c6ee9137
SHA1

54ba284aa2260557daa4857717d4cee24d7cdf3b
SHA256

8879cdffed9a72aacab9e1616363fa52f3b2589023fd6eb5df8bf85821947211
SHA512

8a25e2b83dd1343ecf94a32e2300aadae2f59b87b2370aedce4d155075ad5156f6fb10014f55a75a1c2bf55f86fbf66d767e05beafcc494ced7b25b67636542d
SSDEEP

3072:zzruc1Gp7F1FplM2Ooz3aVIFun9wuhbVtLbf8E:v9ilXz3ahn9wStbfb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
f5429e9d0b87173062141225c6ee9137_JaffaCakes118

Files

f5429e9d0b87173062141225c6ee9137_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ