5d5b84f3a573c37221ae57193df6977b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d5b84f3a573c37221ae57193df6977b_JaffaCakes118
Size

97KB
MD5

5d5b84f3a573c37221ae57193df6977b
SHA1

08fa4bb63707718dea453e094fc9044df4f7f0fa
SHA256

e6c5f324af0600f6d6d523cdb2fbd6b49f368fbbfb494aaf833983dbfe0eb7b1
SHA512

a5c9644df9f694ab62b2691337215a496434bc3728a84127e78982d61287ef357af4bea5198a0f567e8a38677ca80e8067502e75b41a0f0a11b1ffc75fd5410c
SSDEEP

1536:wOrVSIcfRUBusfrPdp/IEMLUP+O6Xe8mb6h3/eDY/zrgvbdKPxPa8KSkFKfYgA:XMfyNML6wf+cvWorMAJa8Kdks

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d5b84f3a573c37221ae57193df6977b_JaffaCakes118

Files

5d5b84f3a573c37221ae57193df6977b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 224KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ