5a0a20d00d91c3daafcb466171086e30_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a0a20d00d91c3daafcb466171086e30_JaffaCakes118
Size

3.1MB
MD5

5a0a20d00d91c3daafcb466171086e30
SHA1

ffb995b2b15b8044b452a27d9920a47cfe917179
SHA256

f8e2f1ec896e24a9de3afd17af81002e914e922532a0ad1df6ffd5a8a1d5edaa
SHA512

ad3aa185727b22645f40a5975fa67cbc22d2c0005dfa156afbf884eb96e0e424865742f99335b2d722ddb43901814ea8291f259bd8f2ba1ecda21ae9617bce3a
SSDEEP

49152:oGxLSN6RReXlV8OozAEUxMKYqLxkK0ruuE:1xLS8RReXleOozAdUu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a0a20d00d91c3daafcb466171086e30_JaffaCakes118

Files

5a0a20d00d91c3daafcb466171086e30_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ