d5c14755ab1a260c050bb032aea779e3_JaffaCakes118 | Triage

Sharing

General

Target

d5c14755ab1a260c050bb032aea779e3_JaffaCakes118
Size

305KB
MD5

d5c14755ab1a260c050bb032aea779e3
SHA1

2b7c44b92d3bf9c624735f36779d85fa288c4c95
SHA256

ec4692078fd68aa0cca67a1d8715fdc29c2577b3df083f77f04370b4f67317cb
SHA512

a1e9eb668e0bb14a7bce85f51f32b86ef33a810496bc080eea32b7a9961e17b92ac5d06343045c8fce57f80522908f7e108d2aebcb02a18453669901b223aa18
SSDEEP

6144:zViUoQOgcsNLVK26SkSId67nEBbho9IuZyUu9kSW0X5sJxJ2Zxe:ZomcWVnjE09IsPu9dJcn2Zxe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/000005067_04977188.exe

Files

d5c14755ab1a260c050bb032aea779e3_JaffaCakes118
.gz
000005067_04977188.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 386KB - Virtual size: 386KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ