5dd6d4c231cd46f53af1e45dc263d824_JaffaCakes118 | Triage

Sharing

General

Target

5dd6d4c231cd46f53af1e45dc263d824_JaffaCakes118
Size

20KB
MD5

5dd6d4c231cd46f53af1e45dc263d824
SHA1

7dd3cb84b5615c7f1393318b50539a61263c3d5d
SHA256

963c94d2d944a8a382ab42c2a2c09d5905a916038a0aa9a3799a65d580476630
SHA512

df41c6ec162a82e5bb64fcee24cdf03368ba9a0935d0c8471bd5b0aec31b196c017fa55dc2fe7b714010be920fe9a6bd741dae0add1d4a8c7082c5d67de9743c
SSDEEP

384:on6+nwHXOmfPgYBOAsNZi/m4/a+FK7tskCkkNSxTmTUr:5+m+KgYB5IlvCAC3kn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5dd6d4c231cd46f53af1e45dc263d824_JaffaCakes118

Files

5dd6d4c231cd46f53af1e45dc263d824_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 664KB - Virtual size: 663KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.6MB - Virtual size: 19.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ