5e1ae637f21056c6385d84468e31588e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e1ae637f21056c6385d84468e31588e_JaffaCakes118
Size

113KB
MD5

5e1ae637f21056c6385d84468e31588e
SHA1

2c7b4a6fb1499906457b0c32a896f192679010ee
SHA256

77b0a665a89a7de6402cf39a153a5ceaffd8693128e1aed70d4f88b64dd7bc7a
SHA512

f94d36ffc88a27abeae73b3f59738ea69280287e23e0e88347dc8084910ba414e2781d51605a02a35bbf8e615976550ac1955c34c5dae8b07a15dbe87fe7df49
SSDEEP

3072:R4grhpuYuME/2LY85viYd0BBhT9C3a6XcaWnFqCw/:R4grHuYuMS2/vQBB9vaSFh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e1ae637f21056c6385d84468e31588e_JaffaCakes118

Files

5e1ae637f21056c6385d84468e31588e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

gggo
Size: 1KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 105KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

oada
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ