5dc8e87fd4bbf4afb6858f04e079caa1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5dc8e87fd4bbf4afb6858f04e079caa1_JaffaCakes118
Size

1.2MB
MD5

5dc8e87fd4bbf4afb6858f04e079caa1
SHA1

71ca2101e46e595a753318603430fd472730c06f
SHA256

59db5206c8524a7f5365d0549d6069da80421905775f8d98b1336d39b083ea4b
SHA512

c0d63f43f0962acd69887bb45949d4ac3a07c76c15ffb0c8af57c375ffbe041ea192b88e4c8d8c5dcb41751d4c58d542dad2a00a321e1011211f5dbed6324285
SSDEEP

24576:k7JsvaWhBnL1dop3nAwc6xbYQPi2NgtFr3afQhO4F4V+oKE7rw:kOvaOZdoZAn6xb3PjNgvGfomU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5dc8e87fd4bbf4afb6858f04e079caa1_JaffaCakes118

Files

5dc8e87fd4bbf4afb6858f04e079caa1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0626d4a29ee97fb8e3858a792eaf199c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi kernel32

GetAdaptersInfo 2�

Sections

.text
Size: 23KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PEanti
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ