005f82bb5df65fab37dd3925679d175f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

005f82bb5df65fab37dd3925679d175f_JaffaCakes118
Size

303KB
MD5

005f82bb5df65fab37dd3925679d175f
SHA1

01c2cc905d768b8139ce2a94f0a64bfb2ce2dfcc
SHA256

510ba96f0915fde07c46cf96fa3a9f2f1a0a476df6b3857afd8d5d63371daaa5
SHA512

b3a987e1d71d0a278c8e287d95e22d6129bf8dac504748f6419e0bd5b59c035b4b44dd688777b2c939b49bcd8e2f3c000de7a5ed00810ebe19d970e9f4454738
SSDEEP

6144:HGrFvIl6Onmr/z0d2HwU9oaf3t3l0x8UGLIeFh:gIl6Ou/zpfd3GDGsy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
005f82bb5df65fab37dd3925679d175f_JaffaCakes118

Files

005f82bb5df65fab37dd3925679d175f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 261KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ