5b23d646369127053219f0e2b9846b97_JaffaCakes118 | Triage

Sharing

General

Target

5b23d646369127053219f0e2b9846b97_JaffaCakes118
Size

2.0MB
MD5

5b23d646369127053219f0e2b9846b97
SHA1

52327432f95885df944659a08817d90f58f4cd10
SHA256

af74fb1d8e0d8313bc9cc78b7130ca8d73efb2d161da7deb71298a86848160d0
SHA512

c7d7db89c6e3f44f971b86a761801e6b15f1afc182acf6aff57af4f6450a50c5c6670a9cce1186f7928439dd51849e567ce2466a0394f14dc3715c750f6dcbc6
SSDEEP

24576:PDREAB2WZEZcqsaqnxkcQ7M8dLBQ06ndQ/H6X01kFk5H04Az:Pqq10LWTGwykFk5U4A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b23d646369127053219f0e2b9846b97_JaffaCakes118

Files

5b23d646369127053219f0e2b9846b97_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 861KB - Virtual size: 861KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ