5d1705c5228925629f030ccb1b9503d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d1705c5228925629f030ccb1b9503d1_JaffaCakes118
Size

306KB
MD5

5d1705c5228925629f030ccb1b9503d1
SHA1

f6d72959e1e695880b5ceb2ead7a7a7c254d5819
SHA256

ec89ef063cca264c4b7eba4048cb0885ee000c1adfd94fc87923ea00bfc0bb8a
SHA512

4d32b6e0a68780d104282c5a7b520da2062bdbb814fb7199a1babb9bf0f7c7dc5ed54daed711966d2c0e94bff11c789281f050f0bf0ff0d2c8172b7e9d6bbf6e
SSDEEP

6144:bGRzhT72Y0SqzinYKTY1SQshfRPVQe1MZkIYSccr7wbstO4PECYeixlYGicZ:bGBd7SSFYsY1UMqMZJYSN7wbstO48fvb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d1705c5228925629f030ccb1b9503d1_JaffaCakes118

Files

5d1705c5228925629f030ccb1b9503d1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE