f53de61baf8801c4c9b606437fad68a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f53de61baf8801c4c9b606437fad68a5_JaffaCakes118
Size

88KB
MD5

f53de61baf8801c4c9b606437fad68a5
SHA1

7eecfc55e981ea65f743dc4ac74538f205e9fc94
SHA256

9b83f9fc802560fc3af4ca331f52490ca1e80bb01b4fd21e984d9e01317114a5
SHA512

2e2f3992cc04b4fcbba2905dbd675839db029e69c47859613a30f1b30c7b17762c6dd866f35a653535192db3a66c5760999bbeff36cb46da6918ebfb421c7cb1
SSDEEP

1536:R0P95BLr/i3phH9EkF3YHebKPEa493m7OhiTaGq03ERf:695Vr0phH9EW3YH/C9W7IiTT3EJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f53de61baf8801c4c9b606437fad68a5_JaffaCakes118

Files

f53de61baf8801c4c9b606437fad68a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Mnr.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ