5a464ea229ce0cb21b0f50177537ba15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a464ea229ce0cb21b0f50177537ba15_JaffaCakes118
Size

145KB
MD5

5a464ea229ce0cb21b0f50177537ba15
SHA1

d37a927214fb14ca036b8fe332324e7d5162e702
SHA256

5357997045d0d278db2dd942873af30825e3fa3a8e6c09323b1a6bef71f44059
SHA512

5b7e411be585e110a5eb2b5ce56f2e762edbca60f7d788e0dc0fbd996b26f9c7f83173d85e919b0e6c136d50f8050ca7be2dda5f7aa76175351f656d9e303614
SSDEEP

3072:J9Pk3INEtndq1a+nLjB24D6JXiYgNoPzkKXkzagfovR9:HM96tLjB2hRP3WfovR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a464ea229ce0cb21b0f50177537ba15_JaffaCakes118

Files

5a464ea229ce0cb21b0f50177537ba15_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE