f5d3cfba38efa8fbfb8d6452f82c483c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5d3cfba38efa8fbfb8d6452f82c483c_JaffaCakes118
Size

138KB
MD5

f5d3cfba38efa8fbfb8d6452f82c483c
SHA1

531b46ac7c5da6beea1e501d56bd7f3391c2cdeb
SHA256

cf44c1f17ba867daee839c45ce815c8f873d9677e6d7c17a8cfab32e8f20c866
SHA512

445f53a0ab53e94bcb58b511f0e7309128d2a02c174f7ed7d3891af0ec6621c96f89d57af2e914f49ddf20eaf5ea0cf83e113d27c4816d012b49f2a503710dc4
SSDEEP

3072:t5jlXUZYmTpnesxW3YDCrbbUpXIjkK2cn29c:fj0VnesgNgaicn29

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5d3cfba38efa8fbfb8d6452f82c483c_JaffaCakes118

Files

f5d3cfba38efa8fbfb8d6452f82c483c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ