5b85a47457a26189af57da3253f4687f_JaffaCakes118 | Triage

Sharing

General

Target

5b85a47457a26189af57da3253f4687f_JaffaCakes118
Size

1.1MB
MD5

5b85a47457a26189af57da3253f4687f
SHA1

e6c3d91bd9acc15947f248108e72b44393823f39
SHA256

b1f05594e3c9eea08cefaa028c66ef8bd4cc477189a895866f81147535311b1e
SHA512

506cf6f838e43c731966b8db3fea99251b7a07344262faaa960d9e1affc94fb5b040284da7a638cf22f3b8d4ed812f2887cff44c7b78b6273500bb9c0b89f477
SSDEEP

24576:qbHEFeOHAWVbtrlYI9xq01CL4nauWZAEt7lcFy6GsbPsn6SQbG7nLxuY+08I:qTEFVxVbtrlYI9xq0oL4nnWKEtStHbPo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b85a47457a26189af57da3253f4687f_JaffaCakes118

Files

5b85a47457a26189af57da3253f4687f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 397KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ