5be6e05a3b93c5c6f0208db1259a9cf7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5be6e05a3b93c5c6f0208db1259a9cf7_JaffaCakes118
Size

87KB
MD5

5be6e05a3b93c5c6f0208db1259a9cf7
SHA1

6a897bc6b9dfb0b1cce8ad3867cab9c2d81154d7
SHA256

e860d486a566f42b783ad2024b522114615ba3780906ec5068fcd71e04db1181
SHA512

4435490bc00d70e0169636ca4d3c9fa3e1736e403e03296ee43e60bd648850c2e248461245b033f3d9af9a523789fbf2b09cbd0e1b5b559c34e47441a9b743eb
SSDEEP

1536:CbpAK120j+iJMBL8cePt9/f4oO6jTrsvXm6H5zJ4Zg:8zJ6OPt9/P9Trx6VEg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5be6e05a3b93c5c6f0208db1259a9cf7_JaffaCakes118

Files

5be6e05a3b93c5c6f0208db1259a9cf7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ