5e199583dc045adfdd8f31de38d94193_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e199583dc045adfdd8f31de38d94193_JaffaCakes118
Size

301KB
MD5

5e199583dc045adfdd8f31de38d94193
SHA1

50663f823191a33cb5d4c78bb954069580bcf7ad
SHA256

dd6467bf44ba14bd54da91ef73b106ff6735352e89d99b01cfe5c6c206653c05
SHA512

35200e8d40f8cdb86ae0dfac49d36a0b73a35eec6b350164802da0880828ffbf3e9d84dc43598dcc357f6e3ed2fafd97880368ec5aff156fbe05e006784c51ad
SSDEEP

6144:E17NP/NYtG+JJURLq8xf3WH/xVxhJMys/Txux6xY/XfS2JxbxS6/6HxE9TEsdwJr:IXCvJJUrxf3WH/xVxhJMys/Txux6xY/s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e199583dc045adfdd8f31de38d94193_JaffaCakes118

Files

5e199583dc045adfdd8f31de38d94193_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Tad61cc148c61bfTad61cc148c61bfTad61cc148c61bfTad61cc148c61bfTad61cc148c61bfTad61cc148c61bfTad61cc148c61bfTad61cc148c61bf

Imports

mscoree

_CorExeMain

Sections

.
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 1024B - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ