5a66fdb043cc8a0d7b1a363960c23b08_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a66fdb043cc8a0d7b1a363960c23b08_JaffaCakes118
Size

429KB
MD5

5a66fdb043cc8a0d7b1a363960c23b08
SHA1

e4d63ed7190e4c843168cf1620faeed9ebe6e9cd
SHA256

68f871cdb7bc586f44934ce4336cf4883092810283dd5d3d1ae828ef2d50be12
SHA512

d355c441123a254f6d704f88f8ebca3923e889d72b5c5d93e6b5cc7cc5f3cf18b1b0a3e8eaaca317848e7cbb8d3c56009290a0c9e78d2993f105d28792acea08
SSDEEP

12288:9WIiFWaoJe/3GQwadNjgWhtMemqY1vKGjA6I4hyjlHV/L0zY88VKj+H:9JeaIk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a66fdb043cc8a0d7b1a363960c23b08_JaffaCakes118

Files

5a66fdb043cc8a0d7b1a363960c23b08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 427KB - Virtual size: 427KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ