5d446835ed53759c6e1cbddb371b9d75_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d446835ed53759c6e1cbddb371b9d75_JaffaCakes118
Size

5.2MB
MD5

5d446835ed53759c6e1cbddb371b9d75
SHA1

c7457cedcb03006206a8b179e64bd919e65be392
SHA256

a7dcb349962945edbb1ab8d64636eddc57a1397400fce59dc664d1131fd22b67
SHA512

913b3d12bb7a52adaf01bdf56f8bd83da9f23a8ed0d5a018f692311e8c35f3fd56341fa3e1d78a1bb6e158fa40a9c37961c35a7cb0ec91f1988b931438497f28
SSDEEP

49152:pOvs2WEW0Azd314SNnXa4YrgX2xSlHdmaneQwKmzkvxDpsR:pOvfWEWfz4Sts5QeHz2BpsR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d446835ed53759c6e1cbddb371b9d75_JaffaCakes118

Files

5d446835ed53759c6e1cbddb371b9d75_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 395KB - Virtual size: 394KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ