5aabad9419b29c71a61f03091527c47e_JaffaCakes118 | Triage

Sharing

General

Target

5aabad9419b29c71a61f03091527c47e_JaffaCakes118
Size

24KB
MD5

5aabad9419b29c71a61f03091527c47e
SHA1

86da58249b1a5ba5fea39b3dde12c7be731ac4a3
SHA256

6ea1e0fb53ab38b74ee51803e3c0704d926895289108ad01ba1e3a47a9a85508
SHA512

ea10ba63af196d4460317ed8c60715852cd29e0a790c7e4be58d63e4e68f7e507f2e3955823fa47203b64c79ec31decbaf7818860eb2c8ba44d7899b1828e983
SSDEEP

384:ifjBbU3hdUOu2HJ8IQ7JAD4lu5oqNFKHPAY47YpNqdDPBaa:mo3hSn2HJjcu5o0KHPAY4cpIdDM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aabad9419b29c71a61f03091527c47e_JaffaCakes118

Files

5aabad9419b29c71a61f03091527c47e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 593B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ