5e0c644140a5e1d49c3dffa7e0861354_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e0c644140a5e1d49c3dffa7e0861354_JaffaCakes118
Size

89KB
MD5

5e0c644140a5e1d49c3dffa7e0861354
SHA1

5f4ff8edae385f1e23cc7d2bb2f6c5d2ace6e9be
SHA256

3aad15b325bd69dc930464de700291c25a92f1526c63d87f82ae059e5252a9b3
SHA512

c7b0c7510a5762db2ce9d8eb38dc2d319d3ecb89ae1b064f86c84b3ed37b06b18a7a47ef9633b5b7240fa92333a3629603a852caf055a39d55d9a3de3bd3d3ee
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzhagZZFOdVr9XU4KV6GqHK2:lV2BZVPlFlnxClFvLLcA+sPDzhagXUdJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e0c644140a5e1d49c3dffa7e0861354_JaffaCakes118

Files

5e0c644140a5e1d49c3dffa7e0861354_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ