f5a4e808f9383dfb2c182010bb0123e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5a4e808f9383dfb2c182010bb0123e7_JaffaCakes118
Size

385KB
MD5

f5a4e808f9383dfb2c182010bb0123e7
SHA1

fb6751951eefdfa378d2cb5f45a487d0b50b0caa
SHA256

c97f4348a471f364b7c882b0f0526fa9fdb0ba50915d67241690137b18edac69
SHA512

487b595ab175bc201bc7609c5c51c9c2d0bb62076d6511cf02f0e224f818f6b891d44e04900f63bcbbe97cc3c5f9e46d5e92736bcf35265f969ff0630fda027c
SSDEEP

12288:MDvotSBVz+9u0qLfk7azlGZzvpeGHlFG/VDB:JSBt+9jgfkqu9ecl+VDB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5a4e808f9383dfb2c182010bb0123e7_JaffaCakes118

Files

f5a4e808f9383dfb2c182010bb0123e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ