5fa85f6b9d586234d86a92dfe663f160_JaffaCakes118 | Triage

Sharing

General

Target

5fa85f6b9d586234d86a92dfe663f160_JaffaCakes118
Size

864KB
MD5

5fa85f6b9d586234d86a92dfe663f160
SHA1

b8ddf9bd783457e180f6bdcb31c712debacbddfc
SHA256

5da25d9af00cded5377cc30943ae9084253d110abbf057e995aacfedfa1ef145
SHA512

99baab2eceaa41deee6e84ae99edead62e15132b6e4b6c43680f6c64c23c7cdb9a0fc1cbd73181c5e7aed8bcc4c257d0dad3bdbdd9746d59c0759b1490bdb1d5
SSDEEP

24576:ZA6CFuZyE+ood7qYUAokmz9Buk/GwkU+Foo:jCFuZyE5od7zUFkmruDwkU6oo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fa85f6b9d586234d86a92dfe663f160_JaffaCakes118

Files

5fa85f6b9d586234d86a92dfe663f160_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 829KB - Virtual size: 829KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ