5ba0cc19a8ffe28799f8c0a24870e05b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ba0cc19a8ffe28799f8c0a24870e05b_JaffaCakes118
Size

97KB
MD5

5ba0cc19a8ffe28799f8c0a24870e05b
SHA1

943c2cd557213c83e2e49c0669753403be223bfc
SHA256

c879dbc63f3afd418aa24062b6d155fee7bedf499d17d9f5d05859a2b152a07d
SHA512

bf7f343ab3723dcac19dede0ca38f90915956c058a70d341e453d61221465ed2c9b8e46a4e545d95e0ef1d48e6257a142c8acc0ccf5b93ddfd1961c4da7270e9
SSDEEP

1536:kDYJCHlPr42zy3BRW4SuM7aFMdZ7GPwxVR6s+tGds/qZM+a7m70PZsAT51CKD:k9Prm3nWruMPdZ7uI+C8Ye7DPek3CK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ba0cc19a8ffe28799f8c0a24870e05b_JaffaCakes118

Files

5ba0cc19a8ffe28799f8c0a24870e05b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

\\psf\Home\Desktop\Bifrost-antivirus7\hicham2.pdb

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ