5ce79934ab28e04249685c935d170b71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ce79934ab28e04249685c935d170b71_JaffaCakes118
Size

81KB
MD5

5ce79934ab28e04249685c935d170b71
SHA1

184706d5f9625b3f97131a45004e4c690523c250
SHA256

4923c5ac8ee1b08693ee5f43c92eb9e8945f4e658d3139613c98fbf87a7d025d
SHA512

54a6352279dcd2d3f9b9c18a5b99675764d36203b183ab34f7aeabd99bd213a3dadf00581c4a7e1b83c8c12364189d6044d48f298e0069ac11eaa00bc0758032
SSDEEP

1536:ZFAyyET7KXw7OCGO6nmR/u4jupniN+mt0biF8BCBmBT3/L:ZFAyyET7K/CGO6mVucKniN+mt0bC8IYB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ce79934ab28e04249685c935d170b71_JaffaCakes118

Files

5ce79934ab28e04249685c935d170b71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ