5be7aed5e2fc5fda2d7d42b8fbabaccf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5be7aed5e2fc5fda2d7d42b8fbabaccf_JaffaCakes118
Size

320KB
MD5

5be7aed5e2fc5fda2d7d42b8fbabaccf
SHA1

bc28c4bcb6083f9e64645f3a30b1485cb42928d9
SHA256

de0863cc99dbb304778ff146152e448ca6629f612c3ca56749e72c21bbb5823c
SHA512

f71138d50e4a393d43e35c1f73c6d7c2484fff4106ab123b8dcafa43e4dc3b991beceed33ac10dcf51f526a2fb23311239371cf46c075bab3e349881387237fe
SSDEEP

6144:ZBeqHNkVnBz3CygxladeNURw6w0MEKzrUX3Uz6AZDWGuxLir:PeqSVBeygxl0D+6w0MEKz/a0r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5be7aed5e2fc5fda2d7d42b8fbabaccf_JaffaCakes118

Files

5be7aed5e2fc5fda2d7d42b8fbabaccf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 597B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ