5cf1782e70dd381dfd21fcfc9d76ba29_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5cf1782e70dd381dfd21fcfc9d76ba29_JaffaCakes118
Size

86KB
MD5

5cf1782e70dd381dfd21fcfc9d76ba29
SHA1

ac1b2ebcb5bcc69575ab79cb5769c11c66c331fb
SHA256

e3d1ca24d0b798aba279c7d9bb09768e5e2c8c23bb362c72ec56bb5bfa9d5a43
SHA512

756610922afc29a335635a0080734b163be94df1aac4238e26c4694d13aa0c50f646960fe11693f39ff8d13d28b35b841160aa93f034b1c13438c64c9e444f3a
SSDEEP

1536:HDih9wJREezz4DlWtNyxMpzajrbdntcsLAkNnuV:jihGYezVtDunzb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cf1782e70dd381dfd21fcfc9d76ba29_JaffaCakes118

Files

5cf1782e70dd381dfd21fcfc9d76ba29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

525e19b4145fcab4c2711e63d6bdbc5a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ord173

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE