f5ed235d15ba7cca4d6113215efa93de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5ed235d15ba7cca4d6113215efa93de_JaffaCakes118
Size

471KB
MD5

f5ed235d15ba7cca4d6113215efa93de
SHA1

84fc42e4c6c982c273cd986fd8bab6c18940ff86
SHA256

33d53258ebe5b55c4916b9d609a8d46a841aa0e902f097532871a6142f0623c2
SHA512

c08fbd53a6c92e69152142c2ccd1535abac8029296f7f2dbeedd7bac189a407c537a8d89e3bebe4cbd21a1d33d54402cca94d19b6182d63134620d915c938021
SSDEEP

6144:H6q4nY5YYkMilATlXPQzeN+2vwQmZZT0Qt44CMBwFW4fyvycm7rZ0vnhAp080Oq:+M3lfQGmZp0MQMBwFW4ff7Ov7OqKoe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5ed235d15ba7cca4d6113215efa93de_JaffaCakes118

Files

f5ed235d15ba7cca4d6113215efa93de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.enhqf
Size: 512B - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE