5405c83a8da9225a22ac4a575ac6454b_JaffaCakes118 | Triage

Sharing

General

Target

5405c83a8da9225a22ac4a575ac6454b_JaffaCakes118
Size

1.2MB
MD5

5405c83a8da9225a22ac4a575ac6454b
SHA1

53f316b023ace5b15d0243662d3b3f047f583d3e
SHA256

cbbab3c504af017289c1032c98f22801025ad9309636342a9d59eb49f7bb1fbb
SHA512

463c24bcee9e3fb87bb3899327a35b8db67e86ec4a76486f0d25794093a572bb58289a901aa539d44968e06d0d6ac3f7e34e1e09bb1fef93c94b22d58fd52c50
SSDEEP

12288:k3HxvTzdIhHc6s6fvAHL8EIEgCPcuxWlsmP8H7zNA8vF0FBDku1j+W7kL9Hnqsx:k3x3S7s6fvAHa1eWnEb6+Ow67IKHKjI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
5405c83a8da9225a22ac4a575ac6454b_JaffaCakes118

Files

5405c83a8da9225a22ac4a575ac6454b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 730KB - Virtual size: 730KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 393KB - Virtual size: 393KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ