5d3f52a67976872f30b6d2476845cb4e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d3f52a67976872f30b6d2476845cb4e_JaffaCakes118
Size

248KB
MD5

5d3f52a67976872f30b6d2476845cb4e
SHA1

12f43e9d099eb00558899cc61321e5968739a068
SHA256

a41b90a8497b7621c88602b6c6f87f7b69fac438a3fea47752d511e1e8b74404
SHA512

c338e9f7c1ecbd4cc5654a0b954d13e416a240b98a375e1f47be34ded7d4861fbee038282a230bc2efd493852d2647151742bff38a0cb96d312a52e6bbeaf429
SSDEEP

3072:YZp3DoV97/8g8v9If3dQG5QxTGN+/Nq12kmCljgfNJNZGFuegabFLkfow023gg:YZpTof/yIvdLOWfTuegkLkfv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d3f52a67976872f30b6d2476845cb4e_JaffaCakes118

Files

5d3f52a67976872f30b6d2476845cb4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ