5a9d548670a4be3f2d44bc808dfa94ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a9d548670a4be3f2d44bc808dfa94ba_JaffaCakes118
Size

441KB
MD5

5a9d548670a4be3f2d44bc808dfa94ba
SHA1

af96bbdfabed2d05ab540dd96211afca8dbbba97
SHA256

c4767bc32c9943cc19bdd7609b7e91e8dc4ef472e89b92dae7e070e5a5e2c095
SHA512

41e768f0c43634b6241c4101777c231d6432dc743c8424b7ec54a3628ed212e9aa3ae9b9ef328b8128427adb08e1b964dfaf88006f68c182cbb1b5360b521a54
SSDEEP

6144:tAHPZ2w407H1CKDVkPLxVNJ/vkq021zyeeixF5dJqOcG2FKfHyXUTMc1yEnl:tAvZ2wBV4PLNpM12fL5dEnNHps

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a9d548670a4be3f2d44bc808dfa94ba_JaffaCakes118

Files

5a9d548670a4be3f2d44bc808dfa94ba_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 379KB - Virtual size: 378KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ