5ed16874329018a50841846288d1f789_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ed16874329018a50841846288d1f789_JaffaCakes118
Size

829KB
MD5

5ed16874329018a50841846288d1f789
SHA1

f543b7691d8ece4e73b4a5dce0b2542abde78365
SHA256

20873ff42952202d4e0b9367877ccb5a9abcf084a43b0d3dcaf0f003513dedd0
SHA512

1bc1600d0ccd9e0e4edd7fba5ec07e15206bb0e1d1d3602fc1330e755cf3946dfa1596e69a8d98d8be7cebc86c74a662b6674569a14652d3d8d688b3b33c67f8
SSDEEP

12288:AArGqbqQA6BlqnAEhb+7CMkqnAEhb+7CM7qnAEhb+7CMgBtQeAPddagQIkE:1vBTLQeCahIkE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ed16874329018a50841846288d1f789_JaffaCakes118

Files

5ed16874329018a50841846288d1f789_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 658KB - Virtual size: 658KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ