5eadb7c5ed6d2b2660ac39575a64ac42_JaffaCakes118 | Triage

Sharing

General

Target

5eadb7c5ed6d2b2660ac39575a64ac42_JaffaCakes118
Size

48KB
MD5

5eadb7c5ed6d2b2660ac39575a64ac42
SHA1

a04f996477e273544472e0982011ecd82c74360b
SHA256

ca9789867e7015184df9ebb38e6baa5a23cf71a61d0cc32c3801efcba14cf621
SHA512

4d9c07d90f5e01894bd8158097134f3aef8906f16b8512a643a3b2c54a462bb6970674c0be0ab0c75185fa8f00848fa0c7539c39389440224e58138d683a5e1d
SSDEEP

768:E0axqoEOhkBRbVBxzEAB/l+ML36RHBkEO88BR2:csFVfzEABB76Rhc88B8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5eadb7c5ed6d2b2660ac39575a64ac42_JaffaCakes118

Files

5eadb7c5ed6d2b2660ac39575a64ac42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ