05e50d6be956d1a470b87d2850f385bd_JaffaCakes118 | Triage

Sharing

General

Target

05e50d6be956d1a470b87d2850f385bd_JaffaCakes118
Size

2KB
MD5

05e50d6be956d1a470b87d2850f385bd
SHA1

410ae3dd54c3def0a135d09ca3dd6d8c5495da97
SHA256

b724d6ee8cd90e973f261a948fec5a0f745e979a54363d5feea0ea58c57468dd
SHA512

af8bda055d267b0bbd3c2d39b6e3fed3d4357598d063f1d79d6278e741e4eb45e01aac5695f94485754309577e0c2906ee17a377b962a8d14e6e3693f92e7bae

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05e50d6be956d1a470b87d2850f385bd_JaffaCakes118

Files

05e50d6be956d1a470b87d2850f385bd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 873KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ