5dae1cf831858a3a0cf5aa63bd487af5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5dae1cf831858a3a0cf5aa63bd487af5_JaffaCakes118
Size

1.1MB
MD5

5dae1cf831858a3a0cf5aa63bd487af5
SHA1

07e4f88d6b3e91913cc27fd39bf6e1c9c9f0b298
SHA256

a6a49e6d2f6a7dd492d82b56bd02aa8d1eb7bffcf0eb2c2179f0464b5fc6fc25
SHA512

1e6a06b2f03a8a5586305e8b9d13d1bb74494e86ad4a8e06b90525494fb6aeb0e7f1d66f6e2484fc00957a684696bee3438ecbd100a8ceb29429aa2039b3943c
SSDEEP

24576:tbjae2xvMPcCVryhK5WsInPKeDGqmSlSeBVE1YBZ5/:NjD2xcACWn5G0RB61wp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5dae1cf831858a3a0cf5aa63bd487af5_JaffaCakes118

Files

5dae1cf831858a3a0cf5aa63bd487af5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

/rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rs~c
Size: 4KB - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rfloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ