5e13bc9ed9892992fc68baaad7bc9be8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e13bc9ed9892992fc68baaad7bc9be8_JaffaCakes118
Size

89KB
MD5

5e13bc9ed9892992fc68baaad7bc9be8
SHA1

f7239878c039a26153613c16c480d35cb5047d76
SHA256

d8917037ca5903285ea87f0770f09920af4dbac516e7a79dedc1f3d2845169f1
SHA512

b8b95e1a18bc4b9e70e4ce08b98df21cb85b29a2454368829e812edabc1997c7add11ad10d8ff95b8e63be990d7bb0eeea948879ed2c5454247ff2f549091879
SSDEEP

1536:I2XoqQmqskO+3igl4V37uSOilWMPGx9qWPND0tAxXE:Qg43igmV3SLuWMOHqWPGtz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e13bc9ed9892992fc68baaad7bc9be8_JaffaCakes118

Files

5e13bc9ed9892992fc68baaad7bc9be8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 662KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.6MB - Virtual size: 19.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ