5a85f5871f2a5a0a2e017952acd125ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a85f5871f2a5a0a2e017952acd125ac_JaffaCakes118
Size

124KB
MD5

5a85f5871f2a5a0a2e017952acd125ac
SHA1

bae29fb746d4fb43af913d7602169daf78f2351a
SHA256

18eba8c9fef54040db0951eb344af2203585c1549757f99ca6679007784da904
SHA512

e5dc1fb6112f1a8e9da0535e7eb7c10597447f44296a1e681ec2ecc8f318c2e487f71775aa2b2dd1f1c1b47c7438758be4280a43aab2c343b294a268c79310d7
SSDEEP

3072:v0tmnvvV0PZU9BPdS4viCDCaC2p9PpfGfsZ4D0nb/0:v0tUvVGG1pviCDCxipfGfsZlb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a85f5871f2a5a0a2e017952acd125ac_JaffaCakes118

Files

5a85f5871f2a5a0a2e017952acd125ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 114KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gprowg
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ