fe5a7f1c4f9c4924c8f99fedac5b5fc3_JaffaCakes118 | Triage

Sharing

General

Target

fe5a7f1c4f9c4924c8f99fedac5b5fc3_JaffaCakes118
Size

493KB
MD5

fe5a7f1c4f9c4924c8f99fedac5b5fc3
SHA1

9d4ed513769ee036b3e93c14585af94dbb7f9dd0
SHA256

b69927fbfd7eb038b59aa9b7e9f49cb02d127d48fcf6517e65a379e982e806bc
SHA512

ac0e2006ce9c85aac4e6f8fbce7fdf827202c67bc6806919d496d5b9b0fdfc452b397dc76ee0b28be31444b0bc58a2c05750dac4b55bc260f74f983c52cff0db
SSDEEP

12288:jaz6hGWLY69Lw8/FpQXc8PAZGRMfmkAEMZp7:5LYgLwoFpQM84ZR+aM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe5a7f1c4f9c4924c8f99fedac5b5fc3_JaffaCakes118

Files

fe5a7f1c4f9c4924c8f99fedac5b5fc3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 490KB - Virtual size: 490KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ