5b5e99062a675a46f320ba67e5883863_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b5e99062a675a46f320ba67e5883863_JaffaCakes118
Size

2.5MB
MD5

5b5e99062a675a46f320ba67e5883863
SHA1

7b659826f4a42d6afcf41528dc37a9f1a2a4721e
SHA256

af5bbea2c5131903ef8808e4cfeac166d89c7b74f9dead8f5eeac63a1155f506
SHA512

ff782826e14e0f500cdde29e559c68a74b96f00fd25355bd14e10dea9977f297e2fc72a0cec71d9e258efd22252b22265910d344eff6d7235f427128c83560d7
SSDEEP

49152:XiUi65+sob/KAXs0/aDRKpd4CXFrjBqdGZNnr/9RE:Xirq+sP0itKpd4grjBqwj/9i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b5e99062a675a46f320ba67e5883863_JaffaCakes118

Files

5b5e99062a675a46f320ba67e5883863_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ