5a29920b7fc4c2e6c3c1ed91c57b00f6_JaffaCakes118 | Triage

Sharing

General

Target

5a29920b7fc4c2e6c3c1ed91c57b00f6_JaffaCakes118
Size

251KB
MD5

5a29920b7fc4c2e6c3c1ed91c57b00f6
SHA1

d3ef2645f2c04c44f716332ee9f89579511a558e
SHA256

ae86fb2353fec63756c9213b749e5bad1fb56f4d0cac4278d4382a4798d3f545
SHA512

83de1f88a8614a9b74fc62ab81368f48c56f2ebb8d71799f918203213c2d2dbb9ef5a1b91ce81ff34543ff2fb340707ef8a5d91bfe00ad3ffb382f4d6b3a5a08
SSDEEP

3072:DiXSCz1GSvUe3b1w1akSXkcd7o3fZVtPGKx97JbPZiF520jtWp2ZCjTlSdx+2vx1:DiXSCz1GuUeLGfn3/tP133vY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a29920b7fc4c2e6c3c1ed91c57b00f6_JaffaCakes118

Files

5a29920b7fc4c2e6c3c1ed91c57b00f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 198KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ