5af78a80cb5fa2d51b9974d7e527a356_JaffaCakes118 | Triage

Sharing

General

Target

5af78a80cb5fa2d51b9974d7e527a356_JaffaCakes118
Size

155KB
MD5

5af78a80cb5fa2d51b9974d7e527a356
SHA1

4f2c914034f3b7c5abbd4619072ba2d8c5e9c34c
SHA256

1c38128a813a4e656e8c8c75ed2914df77fe04e3bd0d41d9b13149ff73e01ec6
SHA512

a3f9a8a4b6ae1993de5f289d9adb8c2567062624b34d363be8110942492b9bc909616bc91248af8e934421e31441a6afb696366114809a9b9c212541d0d8c41a
SSDEEP

3072:1G3db+1rJiWDZofm9n2JTIjA7WlO2xaSgF4RZZKh7ic:xLiiZ7picjAywwaBFX7b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5af78a80cb5fa2d51b9974d7e527a356_JaffaCakes118

Files

5af78a80cb5fa2d51b9974d7e527a356_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 289B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ