5d14342667463d28dc1098084a5401fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d14342667463d28dc1098084a5401fe_JaffaCakes118
Size

289KB
MD5

5d14342667463d28dc1098084a5401fe
SHA1

7fbfb2b0f074edf796b7d0fb1cf47f451dbd3302
SHA256

4b802eafdda1e94181aa81512ebc4116f741d71de0254e5446b30f17544adfa0
SHA512

9318309b6754ac30093fc12c90c4945fee86ebca2794cd6d7d6fedb8cf9893eebca0e4bc185a00b48210b3ed13929688b87bb61257613619d4ceded2379012e6
SSDEEP

6144:lZ/Ns1VRWg9gKViCusAZQyOUKZEVrT9Noz:Vs1VRWwkhQyCEp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d14342667463d28dc1098084a5401fe_JaffaCakes118

Files

5d14342667463d28dc1098084a5401fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ