5b163a923c3625d7df8becc51e0bf65d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b163a923c3625d7df8becc51e0bf65d_JaffaCakes118
Size

39KB
MD5

5b163a923c3625d7df8becc51e0bf65d
SHA1

cec6e4abc307f0edbc083dde06d165f2acb8084e
SHA256

0db1a160a1b6ef4c1de66f3e3cea81012d58939011ab390320f9b9b04d864244
SHA512

c83cf13c59592e517b839c5f848aabe18881c157c36265949949367014e7ea5efb06a3749da805f57e3885d6eeb24d99a0bfd172ab21adfa1fd1ecede7ad1a0c
SSDEEP

768:+IoxkEoPUTYjoLOlxUFqrEl77bm62T2VMoIsgmQZ5PPnoZql:exYQYoLbFzl726yoMoIsiZ5PPSql

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b163a923c3625d7df8becc51e0bf65d_JaffaCakes118

Files

5b163a923c3625d7df8becc51e0bf65d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ