f5cf21a4e1d97d9fb83d10d3c7f5497a_JaffaCakes118 | Triage

Sharing

General

Target

f5cf21a4e1d97d9fb83d10d3c7f5497a_JaffaCakes118
Size

485KB
MD5

f5cf21a4e1d97d9fb83d10d3c7f5497a
SHA1

9e794c6842fca92dcd8e4a4b7c7b42244ce3926c
SHA256

f6af5d9c89eb12b2158ded4f033f49843ff1cc6d00b4955adb731783b385d256
SHA512

2327632182f96c569efa1822700531f450ce94b15cfb689e228974cc56423a061cc46306f47ad570b29f8b62d429f5288d88a1ede9e1f5d3baf6c30571b9fe7f
SSDEEP

12288:TNodBiTI+TpTFA6EZO7KUQRZ66z24VZbdrpgrXN2LWzmidN:ZoPD+TpTF3vKU6Z66z24VZbFpgJ2LWzv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5cf21a4e1d97d9fb83d10d3c7f5497a_JaffaCakes118

Files

f5cf21a4e1d97d9fb83d10d3c7f5497a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ