5ad84d46c54b2a4c4ed19c44d4d99a10_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ad84d46c54b2a4c4ed19c44d4d99a10_JaffaCakes118
Size

512KB
MD5

5ad84d46c54b2a4c4ed19c44d4d99a10
SHA1

be46d2f287d397f2950b0bc7580fe11607be728a
SHA256

99bc834fd323b319690ae419660de74534387ed923d4732bf17c47b1e2121c81
SHA512

1964568289dcb59bbdcd34f3d1360e977dc6ab87ff90ff63ea538a055ae79fee6796ba528cd45038af9069cd431dab203ba01ba953b3b99b9f8b032d202744d2
SSDEEP

6144:St0XjJgmx9jfumGiKW+s+9H/WdLb9lJ9uEpOPxfFPd0xf1DK/mdi2i/rYS3+UgJc:S2GHJDfuX939uKyxfFPdn/CJd+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ad84d46c54b2a4c4ed19c44d4d99a10_JaffaCakes118

Files

5ad84d46c54b2a4c4ed19c44d4d99a10_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

tourstrt.pdb

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 330KB - Virtual size: 329KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wtq
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE