5ca68df50d9c265a4f6c3b2276119abd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ca68df50d9c265a4f6c3b2276119abd_JaffaCakes118
Size

72KB
MD5

5ca68df50d9c265a4f6c3b2276119abd
SHA1

aa08729e99a3d6e1b77440cb1bd8fe8bdcc9c73b
SHA256

5013b79f87a4def175404e2de0d9450393919c6501c873903031e2ede8e09400
SHA512

049a7805bcdc128d31d2ee28b6a593877a5ed93f908e037da09b096d0a237c43fc81c7999150a532831ee39b411dd99c80f14b569cf9642f046a5fc73526788b
SSDEEP

768:edMZqfV2DBdNRvU1f2nXCDSR3HVooSvDQdY8PI3zbIMD8c9scZ7tFU:eqBMM5MoSvDQevIMn9n7tFU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ca68df50d9c265a4f6c3b2276119abd_JaffaCakes118

Files

5ca68df50d9c265a4f6c3b2276119abd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ConfigWizards.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.srsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE