5ec55a7fe861783e8e7ae521e1caece5_JaffaCakes118 | Triage

Sharing

General

Target

5ec55a7fe861783e8e7ae521e1caece5_JaffaCakes118
Size

1.5MB
MD5

5ec55a7fe861783e8e7ae521e1caece5
SHA1

4e647e664e50dfbc6c5819f0603d52c4b73e2c10
SHA256

b4c7509a5fddb90961839b91865d2903ae6ac5371d3e75d19144a56d77601514
SHA512

d16457b99db5a4870c09ac09734dc105044372b78fd75bee3508c14af046b26c4f02e551abe4758796d58a1ee95f16f693cbae65c5a4acc7cbbb2088a62de0f2
SSDEEP

49152:jHAHGHk3gIhE3gIh9o9bZ+o9bZS3gIhE3gIh9o9bZ23gIhE3gIh9o9bZJGHk3gIu:7A/4vnR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ec55a7fe861783e8e7ae521e1caece5_JaffaCakes118

Files

5ec55a7fe861783e8e7ae521e1caece5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\abelk\Desktop\Synapse UI source\Synapse UI\obj\Debug\Synapse UI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ