5a4b5eb2b580133eea422e95de345cf8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a4b5eb2b580133eea422e95de345cf8_JaffaCakes118
Size

194KB
MD5

5a4b5eb2b580133eea422e95de345cf8
SHA1

c354ed58e3c5ef63685b9c38f163822d1abb95fe
SHA256

a66d7cd61b6ff0bc14f1e8646fcd0760d937ba2bdfa0a5b929ad49c7801869b6
SHA512

89403338a2d1dc5255af0e5a32300cbb3e92f144a21acd648b4f88a366679df911b7361debe6cb63690fa6d7ac305ab12fc33d0a39404da1205092be1216fec8
SSDEEP

3072:tFZghTIQpDOL+9t9LxD3qcOqWd7bhe4FoW9eycTOEDuafInKcOMpqya/C15fCIB:fqhDwK9LhacpWPe4+qncTRA+MPtfF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a4b5eb2b580133eea422e95de345cf8_JaffaCakes118

Files

5a4b5eb2b580133eea422e95de345cf8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

SecEdit.pdb

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tqn
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE