5d579f50041b9536ee2bc8acf59bd0fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d579f50041b9536ee2bc8acf59bd0fc_JaffaCakes118
Size

329KB
MD5

5d579f50041b9536ee2bc8acf59bd0fc
SHA1

1c147f4001a737ac0324b62999f0048d47ac7de9
SHA256

87b0ea0bca5a72341084f920ce40b2175a5e4d02a5b3bfe9c67fdca4ec0c5d3c
SHA512

9519e4417a06e9f707ef2a7bb01aabab3a4f3202cee72a963220afa200830eafa50d70906863d087c2d3821cb0a0d847a08623468d0cd94b5a41b760b03ed09d
SSDEEP

6144:oftdcNdPCftdcNdPYNSDyDIkFthpBNSDyDRO1thp4NSDyDRO1thp:bdPZdPcSDyTFtjLSDyo1tj8SDyo1tj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d579f50041b9536ee2bc8acf59bd0fc_JaffaCakes118

Files

5d579f50041b9536ee2bc8acf59bd0fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ