51f8b7b55234db37cefe5c33b645008f_JaffaCakes118 | Triage

Sharing

General

Target

51f8b7b55234db37cefe5c33b645008f_JaffaCakes118
Size

343KB
MD5

51f8b7b55234db37cefe5c33b645008f
SHA1

6a781b9a2f7f5a2ebbfd4fcdb12911388e537186
SHA256

594b5955f84abf202d9ddf5d9f084987bd64c89599d7da5afcab5981db358a49
SHA512

9d4efd5247ceb32c664daea3fa182d087cff7ca89160639e11413cb0247c6be9a1a449a6e847200a472a48bf9fa6c0725a3a50a5b1b83b1b1746ef2b36a20656
SSDEEP

6144:m6V3BHZUlb5xgTvRmNnP0WTng3EPez0AYpL+Bnn:m6V3PU55xgTvRynPhng0PezRML+Bn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
51f8b7b55234db37cefe5c33b645008f_JaffaCakes118

Files

51f8b7b55234db37cefe5c33b645008f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 340KB - Virtual size: 339KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ