5a19b42f39e29b7943e732abc7bfd848_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a19b42f39e29b7943e732abc7bfd848_JaffaCakes118
Size

98KB
MD5

5a19b42f39e29b7943e732abc7bfd848
SHA1

5dbd2d00a8aa978393fdd4471e2993d89ebe29b4
SHA256

aea6b490bd78e46615262d5cd80b164c1eade7679713961ebb120338f80d9136
SHA512

58dec1ac06cfbd984c41a152106912c1b5c5a5007daf4d5d6ad902c1bb3052b8dee69f04bdfe3bec53737e57f125ed2cbce20d9270898baccd4029e9378658a3
SSDEEP

1536:j+gWn0/aKcTnbrGUfiZN5CfIFQ6rvOgOZlk9ItWkcg3Fteso7oJ9uuaxsp9OiSNT:fWuaKcTOMIbvgtJwkjMFZT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a19b42f39e29b7943e732abc7bfd848_JaffaCakes118

Files

5a19b42f39e29b7943e732abc7bfd848_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ