5c2922a563e0471cae0ff45b6cc79b14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c2922a563e0471cae0ff45b6cc79b14_JaffaCakes118
Size

1.0MB
MD5

5c2922a563e0471cae0ff45b6cc79b14
SHA1

18ad127259994f2cd9e1a7b5553c92f53d7f0c0f
SHA256

49c3675e8d323032d1f28cedd8414cf8b1624dc003b6b264a6438ee3224f02f9
SHA512

81ebe4fca81b89a56cd7d8e1964f6819f07ce628a854db23fcede01cb64ce0d20f1b8db25136ea5bd8ca697aa46c8cb897efd8338f286e1bf56880e684aab3ac
SSDEEP

24576:uDOG4h+RlCRV9XJVOPf2nbD1pDw1TahPeX9Iv/ic7Rd3UwIZ157Hd+:uL4GC/9XiPubfATaRetmicld3XIZ15U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c2922a563e0471cae0ff45b6cc79b14_JaffaCakes118

Files

5c2922a563e0471cae0ff45b6cc79b14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 993KB - Virtual size: 993KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ