5e886280dbf24f7138d081c30a1262c8_JaffaCakes118 | Triage

Sharing

General

Target

5e886280dbf24f7138d081c30a1262c8_JaffaCakes118
Size

309KB
MD5

5e886280dbf24f7138d081c30a1262c8
SHA1

d29d3093bc857525df67e09ac2e11254c397e427
SHA256

7ef8623847623fd13baf1499379ce3ddb1e4a4c0334962b38e820b81b5b96a94
SHA512

056b8fd82224ec1af3d74254e8c87e5f2bf7b7f52c9895e77214eacd7f00313af816945566b5a565f2539414b71078068ea286f8f93ffbcff9bacf9a5dc68b7b
SSDEEP

6144:EhxK/t0HmvC239njGIzn2Ty3Ur4konBAFavCViZ3/W7+WE:SKjJ9jGTTy30osaaV83/WLE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e886280dbf24f7138d081c30a1262c8_JaffaCakes118

Files

5e886280dbf24f7138d081c30a1262c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ