5c9eb7647e9eccbbfaac76d42cfdf80f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c9eb7647e9eccbbfaac76d42cfdf80f_JaffaCakes118
Size

287KB
MD5

5c9eb7647e9eccbbfaac76d42cfdf80f
SHA1

f0a681074d09734e6aea148233acb698e8b7ec7d
SHA256

73fd16636ee9dbc8a4451cdf74dabf0c198ece3d8f97f4aafa37b679cb6a26e7
SHA512

7fbbf8df3d3638e24dd93e7be5c0a1c899b7cae737cc1c1a9338ae6cad17ca0070a17f2855d85003c00e6b9e0c02fed3e0957933256eaa4a30c5b303c88e3510
SSDEEP

6144:NfeGJXwuZT5LS7E+YCkOB1wse+8Bo04mnnw+KkiTvZxfzclOSpWU2H9xoZZs+kMN:NfkUhi0bebmnw+wfz7SMdxoZRGaP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c9eb7647e9eccbbfaac76d42cfdf80f_JaffaCakes118

Files

5c9eb7647e9eccbbfaac76d42cfdf80f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.Upack
Size: - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Mybr
Size: 287KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE