5cfbb0b29b2bdd6eb3a014a9b900bc2e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5cfbb0b29b2bdd6eb3a014a9b900bc2e_JaffaCakes118
Size

4KB
MD5

5cfbb0b29b2bdd6eb3a014a9b900bc2e
SHA1

ead01411a0d908c87cb7baa54160a10e42447a9a
SHA256

75a836670c80a42f7bce23f17800c2e372243833848e709a0adeab318e69cedc
SHA512

c4d730a48befcc7aac03cbf3038ce543ba8b729ed54dc9b2e8be1bf3621d56b24ebf223f724ab3e73fd3fd27539d4a6ee90d2c206d723fccce10ed1755967b74
SSDEEP

48:6D8+7aI0C3qoJPpV6iB3cZSis4/z73juul5Qbq:N+O783bc55pbQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cfbb0b29b2bdd6eb3a014a9b900bc2e_JaffaCakes118

Files

5cfbb0b29b2bdd6eb3a014a9b900bc2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ