5d40e0bdc589d9c06376dcd2f85207d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d40e0bdc589d9c06376dcd2f85207d2_JaffaCakes118
Size

426KB
MD5

5d40e0bdc589d9c06376dcd2f85207d2
SHA1

22fc50b99bdcf9899ad9975dfc296b00e8d751b7
SHA256

971e7032fa228f3b8c27566347dceb5fba1b9ea5b7725776b63a86895cf13a2b
SHA512

8029482c4f78881ff765dff54e5267b6c674d374789ec8632ed7680ef0b21fbcdab6c1a0cf4ec3a3823112e341e55399ecf4dde8338e037a3459641606e78eb2
SSDEEP

6144:7O2Fqb3Z7kk4DRVPNyvAYYHoaJC+EQdIbyGjW/+/8ctWEq+dfTmx5kOgJl2m:S2Ab3Z7YD7PowdetjWA1y+BTgTgHh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d40e0bdc589d9c06376dcd2f85207d2_JaffaCakes118

Files

5d40e0bdc589d9c06376dcd2f85207d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 318KB - Virtual size: 318KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ