f5fddf69abdfdc8fe478cadd74f64f17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5fddf69abdfdc8fe478cadd74f64f17_JaffaCakes118
Size

912KB
MD5

f5fddf69abdfdc8fe478cadd74f64f17
SHA1

3285325ac68c8bd9bfbbc1c6a3cd5affe56f0bb3
SHA256

c928f8a2fdcea9bf7f28d2e76fcb941144ec889f777993ebcf9d48c1f459b8a9
SHA512

d3ed560d5cae81b6c5315d6c4455f9fdba704047da7bf807f6a171077584866840d98555ace9355ff9ef13ed6f3afa77d67d1f89af431945d92226591907f141
SSDEEP

24576:BEBBa2IcbhtS8ZbG/haGM4J0J7LoqxLuxtr64wwAbMx:iA2LG/h9RJ6Psjwyx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5fddf69abdfdc8fe478cadd74f64f17_JaffaCakes118

Files

f5fddf69abdfdc8fe478cadd74f64f17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 900KB - Virtual size: 898KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ