feea738c5a1eb0b22d65f78dd78caa62_JaffaCakes118 | Triage

Sharing

General

Target

feea738c5a1eb0b22d65f78dd78caa62_JaffaCakes118
Size

500KB
MD5

feea738c5a1eb0b22d65f78dd78caa62
SHA1

5032cef9e8540b8c596c244dbf6612e4c3e16d36
SHA256

029bb2aa2ba31f1b8193f2b392e96f7c8be92efeec4a6f2c551d43f30b5678f6
SHA512

f5cfdfb267c31444a23d94066a2d1e8a12c32cf8d4eb80c38a15db941c884008fb4c898238a3c2e590243664cca55cd6ac651aff12024253b8091a7a3a779292
SSDEEP

12288:54+baNi4nlm+3aIRfW499u9V3iqJ2DcbOTnLR:WGaNi4lH3ayW49g9IfDcbmV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feea738c5a1eb0b22d65f78dd78caa62_JaffaCakes118

Files

feea738c5a1eb0b22d65f78dd78caa62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Lenovo\Desktop\explorer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 392KB - Virtual size: 391KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ