5b512b83ebfd7558acaba94f2c8d0fdd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b512b83ebfd7558acaba94f2c8d0fdd_JaffaCakes118
Size

46KB
MD5

5b512b83ebfd7558acaba94f2c8d0fdd
SHA1

a85ca8ba71c42a6958d77f57d68ff86dc3cc2bee
SHA256

b6d0cdcb971e68c19c55d70a3feb9503185fc7e1a56c1267dd449d0e72e17d98
SHA512

671ff94645c111cb048b8a512962bb68e86e263d045a50b3b7f9270d3b181eacac8439329e9ee9c1ab1660769af9b39f36e00af8831870ec78e389965113596e
SSDEEP

768:BzBIdTLHQzfouv2CHJwLAoJfA2kIsfuk+k912rcf6jO9bM7s2l0:rSfHSlyJmdIsfukFJfsO9bMo2l0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b512b83ebfd7558acaba94f2c8d0fdd_JaffaCakes118

Files

5b512b83ebfd7558acaba94f2c8d0fdd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ