5a822f57416b7208ec760b0964ad0d3c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a822f57416b7208ec760b0964ad0d3c_JaffaCakes118
Size

633KB
MD5

5a822f57416b7208ec760b0964ad0d3c
SHA1

fe4a313847cf20acbaa9dedfc4b24b41b6ad4907
SHA256

628a765738e3cd8e2d17d5b6ca22158c798431bb361657367aacdaee7e8b7636
SHA512

c74f1fe47be13341b3c39159ee6cac498273ad63c05d7d4e0e4fac53067042d3ef08bb38f71afbd605bf5531ddd309a7ac2b4e448c33a5a02f23e4f80c0f4e56
SSDEEP

12288:HTvq/oig2wsqjwwaY0I2x/XV+JJARVJMnTM7nSwXiq:HTi/o0Ow20Td+JJo0M2wD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a822f57416b7208ec760b0964ad0d3c_JaffaCakes118

Files

5a822f57416b7208ec760b0964ad0d3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.icode
Size: 989B - Virtual size: 2.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.map
Size: - Virtual size: 3.0MB

.rtss
Size: - Virtual size: 424KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tss
Size: 623KB - Virtual size: 624KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE