5dd5f2a48658b15e587380d3d58db825_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5dd5f2a48658b15e587380d3d58db825_JaffaCakes118
Size

116KB
MD5

5dd5f2a48658b15e587380d3d58db825
SHA1

cfcb78cefa0865d63a48a329e3f0f20675f92cdb
SHA256

e505f0e192996344cdc25877b06e506462627691eae289f863d6486afd646132
SHA512

4534e8f04f72230f1fbb3d525737404be778a8dc5d886b6597ac1856b8a88eb60216d09f9901df5ea46155fa9b00233607ad5c31437f03ca5464b8f7c30ea101
SSDEEP

3072:p1YLwdtEfD5Nt1j5opKCXdpazvdPs4jH5+iWpH:pqwdCfDxIxXdQPLH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5dd5f2a48658b15e587380d3d58db825_JaffaCakes118

Files

5dd5f2a48658b15e587380d3d58db825_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ