5d49a995fd34aef9aed3932e3f4bdc43_JaffaCakes118 | Triage

Sharing

General

Target

5d49a995fd34aef9aed3932e3f4bdc43_JaffaCakes118
Size

296KB
MD5

5d49a995fd34aef9aed3932e3f4bdc43
SHA1

e7658dfa6d60ddfe1e4339a8fbf1b76432ea8518
SHA256

c246a1dfd4f5293c994328b765ff3df2d667988ec9662547470864dcd90e117a
SHA512

6b58e3ac4cdaf33c3087a07a85e38baf8d2d66edb41262015fe2063f313b176b3b68a91f5a146bbc1b4d090458316ac18364da666c828095f18d44bfddd0451f
SSDEEP

6144:7oTbZeEgFAMJ5p4Lk8/WYqpuA+Fhtl4tjblxcUxSvOoXbgOW79:0TbZeZFAMEkJYkUtl4tjRxjxctb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d49a995fd34aef9aed3932e3f4bdc43_JaffaCakes118

Files

5d49a995fd34aef9aed3932e3f4bdc43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ