5a4cfa0704a1de4a5ae41529046b15b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a4cfa0704a1de4a5ae41529046b15b8_JaffaCakes118
Size

228KB
MD5

5a4cfa0704a1de4a5ae41529046b15b8
SHA1

dbb437a05ce8db98b3a8fc793b526d525bc5bd0c
SHA256

387d5d286adb65870168a802d057e6ae1e335be1f79fe39705dfcfa3d9e4a0f1
SHA512

014918f7ac0271d07b990b5dcec49ce8419ffcd76fc7e25ec97bef6fd1f6891ad9a3b89967b7ac9f3d4ebca982c4ef58d04650f131f07d003711d87772f13b05
SSDEEP

6144:4PLGOblqaU+O7evkF/2QbEGA36NcAOkoYFh:eLWD+Zv8ZbqkoYv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a4cfa0704a1de4a5ae41529046b15b8_JaffaCakes118

Files

5a4cfa0704a1de4a5ae41529046b15b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\haozip2.4\build\rczip\build_temp\Win32\compile\Release\HaoZipMd5\HaoZipMd5.pdb

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE