5b5e9fc49cbd641defb02b207987b52a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b5e9fc49cbd641defb02b207987b52a_JaffaCakes118
Size

376KB
MD5

5b5e9fc49cbd641defb02b207987b52a
SHA1

20c3a2750eec35939245472f27c506511081cf40
SHA256

c47e7ca3911e67e03655b55fc33ed59dff06d17c358d61019c37547a086534a9
SHA512

28d5f3ea1c2bad2300dc37fb0ce1ec2dc5d9f41c07bb8d4ee296f1ea5e42ebff3a3cd9d0378071e2d6e4cb13dc0d4143a335aa1548c13f12df834140711b1fbc
SSDEEP

6144:DfyRQApAWl9hL+WZSocGueMt+FUEcAvC/FKodG:GRQApASZ3ZSkuPEc0kFM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b5e9fc49cbd641defb02b207987b52a_JaffaCakes118

Files

5b5e9fc49cbd641defb02b207987b52a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lpgu
Size: 332KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE