5b1f7aa52a92b4f16bb70c371f699414_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b1f7aa52a92b4f16bb70c371f699414_JaffaCakes118
Size

188KB
MD5

5b1f7aa52a92b4f16bb70c371f699414
SHA1

acfda4df5c5bcbff1942dfdb60eb31a4194550bb
SHA256

21b86c312a3e9a444125bd726499a2248c6de017185aaf370d5075c01053e29e
SHA512

f7a7f134f3769dc5834f81caea62c2d01081eee668716b7ea7082d4cc6dd26a62bf3a7a4e24d6d7bfd17f816c82a8ff22be0fc4cb8b5b5598bb83c6d7e39a9c7
SSDEEP

3072:ZkrD7kNVl5gQcvBerezrkSXRHompJA7sx2oynD+C6ZJmGhiSvUbHZm0BhQFKg:ZG7kMQcieM0y+Awx2ZnD+hJrgUU7ZmSy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b1f7aa52a92b4f16bb70c371f699414_JaffaCakes118

Files

5b1f7aa52a92b4f16bb70c371f699414_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qnk
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE