5c21acc275548964b453dc8ea3824705_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c21acc275548964b453dc8ea3824705_JaffaCakes118
Size

279KB
MD5

5c21acc275548964b453dc8ea3824705
SHA1

f43eb81d7eaa9a756cb0f776cbae3a62c2451a2f
SHA256

32959b9c58a56f19944e15d7316ee2515add3191a7b445dfd302e65f2dc83088
SHA512

c8326581e3f9bed720b186874b1a9ab8fde71e6a403d1564cbb639c4fb6e0ebb9b7347e2bf8cf2ad51a0c1db251a60c7eb77e4a0ca03415cd0f8ae489ccfad32
SSDEEP

3072:QGk9glDEQLQ6FgQoSu+sDPV/WpDuBELXMx:RNhEocQV1sGD5rMx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c21acc275548964b453dc8ea3824705_JaffaCakes118

Files

5c21acc275548964b453dc8ea3824705_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.newIID
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE