5afbfd6f67165a22b6c02e9d56225984_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5afbfd6f67165a22b6c02e9d56225984_JaffaCakes118
Size

345KB
MD5

5afbfd6f67165a22b6c02e9d56225984
SHA1

108229ceaff1907f1146fb0565a514089e90093c
SHA256

f13f1af66fdf428c422f66ff01b4c209ec995c177f69aa068c1de859bc1a59d8
SHA512

238dc59b67435a3633075f337567292da1c033338bd7fed4f10dac0f6c74c1a380fcd5c5aaaed3b5f7c0259d66663f2b13196140d3057c121de4809053572520
SSDEEP

6144:fHEu/M+5MEsHKipLa6+72pBGBLrLNroi7V60lIiF7+Y8u3UTn2:fTwqi162z0180lfJvc2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5afbfd6f67165a22b6c02e9d56225984_JaffaCakes118

Files

5afbfd6f67165a22b6c02e9d56225984_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ