5a9814b06d96a8477043b285f9a307f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a9814b06d96a8477043b285f9a307f3_JaffaCakes118
Size

718KB
MD5

5a9814b06d96a8477043b285f9a307f3
SHA1

84e0f32f7a52f0e68063c9830fa09314f38b08c6
SHA256

42d552c5a1a5dac08fd06b9b62aa4a5b78421d8eff48e95c017c7dedfd389ae1
SHA512

fe8fabf0811210b85acc12e670b3023b95a33b8810bf5367190c162b43ba55734dcb67436b99adcb61c6905e5a04dd2ba88b4bddcae5c0ae11db245e723cc57e
SSDEEP

12288:EP8PTcFsps8ilLHVubjkUiJf2kw4N6VG9a02kcpEcNb7o+cuLKNnt/Qwu7L7ZAzl:E0LwspOL0jkUiJf206VGs9kcZwXngRPp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a9814b06d96a8477043b285f9a307f3_JaffaCakes118

Files

5a9814b06d96a8477043b285f9a307f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 699KB - Virtual size: 699KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ