f5803d2a3d634c888397f738306a3bb4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5803d2a3d634c888397f738306a3bb4_JaffaCakes118
Size

5KB
MD5

f5803d2a3d634c888397f738306a3bb4
SHA1

329661d2237505794ad0f310e47fa6ce2aeed6d3
SHA256

ed7f2a55740551616af81b9c5e52cfa0414a316382b5452344cd56bbdb50b6aa
SHA512

da7862f9392f7ec365abe8014de3143f610df1c00a8d057ca99aa2946b9f91f15f8b4c85690dd45e4ed6d157786614fef4bc58ac8d6bb79cb8b0d5fc4c5a5ba2
SSDEEP

48:6CaTHWqxVS97e1NWNMyMQnBhUAHokjq4bzNZvZ6i1tmolIx0FypfbNtm:sXE97zZnBIkjh/XvbmtzNt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5803d2a3d634c888397f738306a3bb4_JaffaCakes118

Files

f5803d2a3d634c888397f738306a3bb4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\C#_Code\LoaderCsharp\obj\Release\LoaderCsharp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ