f5f6c25173345e9a12a39f7f5d529967_JaffaCakes118 | Triage

Sharing

General

Target

f5f6c25173345e9a12a39f7f5d529967_JaffaCakes118
Size

128KB
MD5

f5f6c25173345e9a12a39f7f5d529967
SHA1

9b3813388acd0a5201070b23981213740babd951
SHA256

35a90a09e586903916d6e9591be380b52a8c44fa1a35a92e491859aeffe21d5e
SHA512

d62af63f3503639dd546fae61fa63ed86e308100b179212e7f3f0ef2b1b3c6274856de819a26297942baaeb513f4dcfee8c4b3f38deb7aeaae43d1041a00fd73
SSDEEP

3072:0cmVWD9FM9GkgcbWY76Olb18ZpdnBdv7WCwh4wv4K2RvSMpR:LmSm9zb37Jlp8ZpxBdv7WCn4HavSC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5f6c25173345e9a12a39f7f5d529967_JaffaCakes118

Files

f5f6c25173345e9a12a39f7f5d529967_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 852KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ