5c44602daff991249ec408530345f993_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c44602daff991249ec408530345f993_JaffaCakes118
Size

1.2MB
MD5

5c44602daff991249ec408530345f993
SHA1

48528622d3ce348fa3dedaefc0ecea301a29aad3
SHA256

1b075b6b57bd025c112b54f283b31fad1147ff141bda546c3518af59d078be13
SHA512

54d7b3bfe1001b8a00ca9ca651839c3340506ebb760e807cf83831ba894d4ad80facc9e6cb0c83697a2357c7383617cfd6b414667322e0db014a5daf9ee823d0
SSDEEP

24576:f9g5YQsBJIPFPQRynI7lRJwjiHadU90C6kFC4sxn:1g5YQ9PcynI7RGiwkE4Wn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c44602daff991249ec408530345f993_JaffaCakes118

Files

5c44602daff991249ec408530345f993_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f0df202c1c04a4f4fcae37a9121185d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt advapi32

_XcptFilter �

Sections

.text
Size: 16KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ