5a19eba957ac85f50c4eeed74af8dd71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a19eba957ac85f50c4eeed74af8dd71_JaffaCakes118
Size

1.6MB
MD5

5a19eba957ac85f50c4eeed74af8dd71
SHA1

e546297e2f0046b8afe3e1e5d2a18e0b68aea060
SHA256

a4ac9e818467b59c11ccb0afb7729d16cadedf69a50262d463213ebc6a9f28fb
SHA512

e83bf257bb058e372ff5e9036b65c68bdb0e71d8d06a7c7c7239a2341cb5c6dc86ea40569dca556aed81dba82eb152e956aa5e6d3b1982ecd066ef7bf9b90d1e
SSDEEP

49152:Mr6xhrlm2VEjvivt+TCoLp0AA4wjHA5U0V8Z:M2DBtVEjvJRA4wbAlV8Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a19eba957ac85f50c4eeed74af8dd71_JaffaCakes118

Files

5a19eba957ac85f50c4eeed74af8dd71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Nad
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE