5fd324812baa5058ad2eec419e337679_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fd324812baa5058ad2eec419e337679_JaffaCakes118
Size

2.5MB
MD5

5fd324812baa5058ad2eec419e337679
SHA1

adb47462ad0fe0b7624d1af12ada4912f316538d
SHA256

20c352bc9727f73cb26d3b35fb4c515380c254a34c10b1aa548e782510b021d2
SHA512

0b5b8b509af1689249ddb3ade9dd1c3756667be4b1d903bb86ef17af2c9aa331a540be9981e7cd8161da962fd2616f04cda238a6d986d4f214c9a903cb22fc8c
SSDEEP

49152:SRkEVCppjYR0t3FyAxetA9VzHad7tXTUY:PEMj+8etADaP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fd324812baa5058ad2eec419e337679_JaffaCakes118

Files

5fd324812baa5058ad2eec419e337679_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ