05e4577e05c00b74be051951bc058c64_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05e4577e05c00b74be051951bc058c64_JaffaCakes118
Size

392KB
MD5

05e4577e05c00b74be051951bc058c64
SHA1

73bba21e0983a6bf8cdc72f6c9d52dc870349146
SHA256

102958f2085cefc569b49b3e6d1ddcb167a13bfb221a0ce47895cc6d16ffc881
SHA512

e716878a5b57f0c08fda2aaac0abe3c695b7053b02f6c3086582b82c7df7c71228cc6871996892a092ee5b44c406411135d15bbf71b56c1cb848aba2965b252e
SSDEEP

6144:wgR4gcnYVOSBFJuOPIlfu4Bqe/DscnASek+28vuNl5u11vN4cwlKA0B:vRzcnYVOSB3ubBqEvnApWNlw11nWKP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05e4577e05c00b74be051951bc058c64_JaffaCakes118

Files

05e4577e05c00b74be051951bc058c64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 309KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ