5f5ae46d6941cae20006998b94c738a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f5ae46d6941cae20006998b94c738a9_JaffaCakes118
Size

5.0MB
MD5

5f5ae46d6941cae20006998b94c738a9
SHA1

921e7551375a7512074ad8ed3e1b3490b411c2b1
SHA256

5571d2cb73bd1ccd8fd9f190252c56be7ea8046874f62982d74b04b001f14f99
SHA512

5f350d208aec87149e7cf8723b612829b838db7df7dd949a2be8ee9d63e57a713c4f5cb51c8b7ffbfbd9d650f76e0b6bb66b99b3bf78b34fbbefcb8419ebc191
SSDEEP

3072:LckAvpWcGbFWLDoW0lvGJAoRb0N+GLplYXsF2SRc:LkCa0Eak4rLpy8H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f5ae46d6941cae20006998b94c738a9_JaffaCakes118

Files

5f5ae46d6941cae20006998b94c738a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ