a5e469f1cffc7ba12bfd84f6c03aac85_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5e469f1cffc7ba12bfd84f6c03aac85_JaffaCakes118
Size

231KB
MD5

a5e469f1cffc7ba12bfd84f6c03aac85
SHA1

b69f721ffee76857cef38f0133c1232a172a37c0
SHA256

f5ef293d9f70fbba2d0d54f4f39f4456961a61d3792ecc5f043f40cc67a8ec43
SHA512

1e1034266b0988cfff658401e9e2cc831a02129874d7420a133eb9bd7478afc5e56091ce615fa9a175371bcb766e3e321dbb0f64e18fd990d30c2488ecab7580
SSDEEP

6144:PC3+i8c0XmyT8cW1peyieABxnP6IIEaLKTCf:a3yXmyA5OyieAPPm5KTCf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5e469f1cffc7ba12bfd84f6c03aac85_JaffaCakes118

Files

a5e469f1cffc7ba12bfd84f6c03aac85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ