f5f79d3da8d53f66c07b50f55e1f3553_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5f79d3da8d53f66c07b50f55e1f3553_JaffaCakes118
Size

385KB
MD5

f5f79d3da8d53f66c07b50f55e1f3553
SHA1

3a9000edeb8f02874182fab3acdb1470c7e31f9c
SHA256

3babbee70180bbea4a835dbcf4a2483ef321e194923191305b52e5c53cbb7e9e
SHA512

ecd506212b755f5f70ef00d459a37c47c765b1b3e569361f29389279e7e52708bcb2b7b49e79b4c6f144e9b87bbf462a681713704bb1b98fb4a7bef8f4a928dd
SSDEEP

6144:0QArXTnaKro6Jb++xi4ubkfVPHZ99+//Rz/tZbDG/KOG7NNo/KRcXB:0VX74oy+xYbkfVP5vC/tfGW7g/KRcXB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5f79d3da8d53f66c07b50f55e1f3553_JaffaCakes118

Files

f5f79d3da8d53f66c07b50f55e1f3553_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ