05739475babd7e7d914882a28931740b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05739475babd7e7d914882a28931740b_JaffaCakes118
Size

633KB
MD5

05739475babd7e7d914882a28931740b
SHA1

dda394f86b9b66b294112cf557eb3bd2f6744b40
SHA256

88cc2a2771cbc434bea1294c750a13cd6f22abb2d0cff2e3dea7f4db5a787c96
SHA512

98931aa12a9bc6866d3fa30b5b65129e0a85ca7d5289fa6ee4d5a54b970fb583e453b20c0b83f09588179540d7b63576c7602880ada3fdede8f29d713122fe1c
SSDEEP

12288:za9FQR3PYBlGLxe0DHZ/ghpVYJrDbwRU9da404Q2c7mqwEAi:z0FQR3PYB6x7DHZ/1wOdW4QpSlX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05739475babd7e7d914882a28931740b_JaffaCakes118

Files

05739475babd7e7d914882a28931740b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 413KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 623KB - Virtual size: 624KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 355B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ