5bc06c2c61358ce25216fb4c7c8bebad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bc06c2c61358ce25216fb4c7c8bebad_JaffaCakes118
Size

1.4MB
MD5

5bc06c2c61358ce25216fb4c7c8bebad
SHA1

e0c9e9dccf00a577ce9a257dc06df2cfe16b0436
SHA256

47be4ede767d7c9d49d18dec20574a95753927e4be076c84c12875cc817d9676
SHA512

80f1b4f1a73bdb4c227227799912cef11a3fcb3b6b1f6bd301a51cbf2ad1fec42e81ae01427fde747d11d09552da9151e5aba93b2d821fbea70f8500eae08825
SSDEEP

24576:lCB0XVUlc3iCvnFSLWAaQJAOFp9H6HufpOw8fJnQ0Lm2SKmYr0+MMGiFwR0s:IwalcSCvFWWZEXeHgpofJnQsRSYr0VMK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bc06c2c61358ce25216fb4c7c8bebad_JaffaCakes118

Files

5bc06c2c61358ce25216fb4c7c8bebad_JaffaCakes118
.exe windows:5 windows x86 arch:x86

af96f74b420e2e4928db2fbeb5093f85

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32 rasapi32

lstrcatA 3�$

Sections

.text
Size: 712KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 688KB - Virtual size: 688KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ