5d18b270317cecde3e565f98190474b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d18b270317cecde3e565f98190474b6_JaffaCakes118
Size

2.1MB
MD5

5d18b270317cecde3e565f98190474b6
SHA1

a78e59b2cbd7e9809916ae62b05a6b8a7455a4da
SHA256

1b6b0e675251cf7eb85d1ac4ac6456dcd63c92ceeac613fb3ef50b1cd86a68e5
SHA512

fbb5c126b3a0ee05d876ba9ebe0716d48d47f59694482929d2fcf50f10e8f9f7b396c78a0233be85c17ee0f11c897e8286ed027ef69a94601d0d6799a49c7530
SSDEEP

24576:fGrSF7cPX5/IBUQ+/7h73kE1U6aSrCpJ5b9qGkdOJU5SsCP9Mjbr:fGraCpsohDWSG75U851Ibr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d18b270317cecde3e565f98190474b6_JaffaCakes118

Files

5d18b270317cecde3e565f98190474b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 36B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 809KB - Virtual size: 809KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ