5b834aac6358f766c440cdd5017ac93c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b834aac6358f766c440cdd5017ac93c_JaffaCakes118
Size

1.3MB
MD5

5b834aac6358f766c440cdd5017ac93c
SHA1

7eaa34e191d09650e62cdbb7bbdd3dae21b7de3c
SHA256

10036833aa197c53adae2df950b0f672042531cd9936ab97f8f480dc6fa1d767
SHA512

7c2ce2701d35b114ebefa11e93be2ba7595d5ee592430709ffed1b645efb68b7d91b444802f205b604eaccfd7984ed742b085464f38d53edda10bc421561252b
SSDEEP

24576:WLjTfKnfvTdINj8GPQ6urE6oxhGCgJdEHN+aVH+SVuNc02Gs/6eLBX:W/TALdIh8/gtgLEMaV/qcPVLBX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b834aac6358f766c440cdd5017ac93c_JaffaCakes118

Files

5b834aac6358f766c440cdd5017ac93c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 368KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

WinLicen
Size: 914KB - Virtual size: 920KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE