f5593e007f8560803aea319e565d9b24_JaffaCakes118 | Triage

Sharing

General

Target

f5593e007f8560803aea319e565d9b24_JaffaCakes118
Size

632KB
MD5

f5593e007f8560803aea319e565d9b24
SHA1

13a95704aec9c54d1db3c10f75ad5fdb02e36534
SHA256

cd80ee6e246ea864fdc126f3f20476ecf32b0f3839864f6ebdc3be91f8d288ac
SHA512

b441768cdbe9f20c2ea5a6634084cb6cd2207f7a19e6e3857f3cbe095e75c755f1495d92183e4b6f2a24591d8cfad3eb619dafcab203fc5862df1ad95492b26c
SSDEEP

12288:E1zMV+4LFV4OobN9I1nqKS9arWF9wZMU1kU5uSiyyjK:E1zMV+4L4bN90qdQaF94kUkd8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5593e007f8560803aea319e565d9b24_JaffaCakes118

Files

f5593e007f8560803aea319e565d9b24_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 443KB - Virtual size: 442KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ