05ab86c7862046aefd3881f996157ecc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05ab86c7862046aefd3881f996157ecc_JaffaCakes118
Size

449KB
MD5

05ab86c7862046aefd3881f996157ecc
SHA1

3d9819dbd08be012c56636fe6388cc7ff12b3d12
SHA256

e0385e59c8bd57271d1f8a1216dde733775081704577a2047264b48b6aef913d
SHA512

9f7e4bcd61bb46531fcc6237b1fa5dbf6f8ebd7695782deb2a0f3d5aea1ac2270ce9fa476d48938969be512f8609b90dddd5f882141b0f41fd7e6d57aa2b4d00
SSDEEP

12288:yLH/58vVOzWbFl60VLQjGBMlNtTAEHCyO7U:yz58cz8zHVT2ft1HC77U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05ab86c7862046aefd3881f996157ecc_JaffaCakes118

Files

05ab86c7862046aefd3881f996157ecc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 444KB - Virtual size: 444KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ