5697e9dc2fbe26d04f55957153efe44c_JaffaCakes118 | Triage

Sharing

General

Target

5697e9dc2fbe26d04f55957153efe44c_JaffaCakes118
Size

299KB
MD5

5697e9dc2fbe26d04f55957153efe44c
SHA1

dbeebefb57db333cdbd6a842ed3cc322d56eb356
SHA256

b5d2ecdbd6249989d48a10f8ec95b0d29ad36c5154c2c05bdb0bb25ed9bdfb7c
SHA512

7fd8792343e9871f8ffa5bcbdd527a4a7c2c2018cd08f4dc42be0a18f29c95e0dc9b544db88cac15e000c609f99c3a451c9505a1b1e60b198fd9ecd6d94db0c5
SSDEEP

6144:V6mqKT25znghEcv8/2CL7EHCUSCrb1rNdbu:ImqKYH8HCxM9+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5697e9dc2fbe26d04f55957153efe44c_JaffaCakes118

Files

5697e9dc2fbe26d04f55957153efe44c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 297KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ