5fbfaf89fb2366a50f17ffb6cdfa2be2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fbfaf89fb2366a50f17ffb6cdfa2be2_JaffaCakes118
Size

1000KB
MD5

5fbfaf89fb2366a50f17ffb6cdfa2be2
SHA1

f153cda0238e4fd4e32cacd9e56e40607d894bdf
SHA256

97bebecd74e5d3d47dbb1ff403b450cf5ed5a38199496f6845731daa0020f919
SHA512

bc30a51fd54d29a715ab4becbcf1def5cacd0e4251db6c89b7cb290d3b0602592aabfe30317460b79b3f936903092b24c6d98445d76fb80435b0d6a92e6e3772
SSDEEP

12288:ymlApnia69cksNW5Dx1wWZQ+aIJaBQ3ep+Lt6Z0OH3zuzNivC:yNnJmNhZgIu4eqjOXgi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fbfaf89fb2366a50f17ffb6cdfa2be2_JaffaCakes118

Files

5fbfaf89fb2366a50f17ffb6cdfa2be2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 944KB - Virtual size: 941KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ