5d3e9e78a4a65f220bd48d36df520e38_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d3e9e78a4a65f220bd48d36df520e38_JaffaCakes118
Size

446KB
MD5

5d3e9e78a4a65f220bd48d36df520e38
SHA1

1ddc7139b44271c491f7c21d109f3407a6436c02
SHA256

150fc569601ac0cf38ddacb2f274a4e43b9541d792f056cd74887a1dd4e13475
SHA512

0c813c2f4e1d66947f709542e2a922acbf9de24d7ca9075fd7cb22fac8fcce8b1b99f9254ae787223f7d8badc901bbf1f4cbe0af08f9dea0353866a8f9545e3d
SSDEEP

12288:GTJ1xa/X3gukmAvIPssqpSQTHpv8sBvGnSheJz:Y2AbwPsBAQJksBOS8J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d3e9e78a4a65f220bd48d36df520e38_JaffaCakes118

Files

5d3e9e78a4a65f220bd48d36df520e38_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 171B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 404KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ