5a78f240bf317a2c789972772bd92152_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a78f240bf317a2c789972772bd92152_JaffaCakes118
Size

524KB
MD5

5a78f240bf317a2c789972772bd92152
SHA1

7bc0d8ed114ecf9669bc071e33393ee50bf396d6
SHA256

d5cd39f7f84845e725128138b10872a269baa553173b7058e96b6ba9fb1b7534
SHA512

22649600091f559c34e4c11f8be5692bfd8c02b49c21ad0b1c7de281965e2ab5f77428bedcaee05a8db6fb4c0487781afd85ff0fab406f102570e660b172bd18
SSDEEP

12288:0DG7TwEZfVbI21gnBZ5tiWFX4GzPJDGs:y+T3a2eP4G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a78f240bf317a2c789972772bd92152_JaffaCakes118

Files

5a78f240bf317a2c789972772bd92152_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 445KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ