5f2383ebaa9b34874a2124602cd9f9ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f2383ebaa9b34874a2124602cd9f9ba_JaffaCakes118
Size

131KB
MD5

5f2383ebaa9b34874a2124602cd9f9ba
SHA1

0e01157ba2e0ae8d30051bc40bdcd0b6256ac7fa
SHA256

bdfee4ff89838d3151b2afae52a25a86b9db5efb3563bd94f2cb101b39a91196
SHA512

b977769a4bc120282b8f70340263dc4ca2981f2c2c14deba13da3b65595ae89a8408177336db723178db0a24c50fde7bead83121278a60ebe0e070145facc1de
SSDEEP

3072:z+aFF+XUWeV3KVJVh1etGKaDainoYcGTTXh:z++jXpO+tGKgnosTR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f2383ebaa9b34874a2124602cd9f9ba_JaffaCakes118

Files

5f2383ebaa9b34874a2124602cd9f9ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ