5fd584e53db08dccc1d3497db8a8848e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fd584e53db08dccc1d3497db8a8848e_JaffaCakes118
Size

147KB
MD5

5fd584e53db08dccc1d3497db8a8848e
SHA1

ee2087a20f541ff0fe7b76c5b8049fb7171e239f
SHA256

6ecdf583a03203295e308afe3238bcd3c29e1e2687783cb15bb72a0cb5a41601
SHA512

841d789da65ec433021bbe250e078f2d67d0a998f057e91e883ae9c9010757082420fc9d032f911395d6f885cafba01364498c42810338d2ac68d2efcce84957
SSDEEP

3072:Bwvt9DwTbW505eoEzNobVA0PzPE0Cmnnych6PDtqR:C11wnW5E65EVA0PTEXuychoDtq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fd584e53db08dccc1d3497db8a8848e_JaffaCakes118

Files

5fd584e53db08dccc1d3497db8a8848e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.cdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ