05c4f2164ea80e236119c795b6f6e4d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05c4f2164ea80e236119c795b6f6e4d8_JaffaCakes118
Size

592KB
MD5

05c4f2164ea80e236119c795b6f6e4d8
SHA1

48d723fc50dd4bf0c3f2f431b0025a63ed3e9510
SHA256

feb35f9a28cf2ffa13353492bda87c826d79e3c0ae3e206c9e40a61d0069753e
SHA512

1ed609815520f18279f4eea375dac14b011faca6f86be24c4160b2ba4df4434dbf142533f034414ac90e6f4840c371f1e65cfbb44d35d2b43229249bc5fbbf9b
SSDEEP

12288:6NXpzS08t5cqob7NuWOtJuazC7Ugf/wSmJsAvoTwXxSU:SNG5cqQMFgOSUgfNesPTzU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05c4f2164ea80e236119c795b6f6e4d8_JaffaCakes118

Files

05c4f2164ea80e236119c795b6f6e4d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 440KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ