5d82e23dc5fb1fee81ad35df95a3b564_JaffaCakes118 | Triage

Sharing

General

Target

5d82e23dc5fb1fee81ad35df95a3b564_JaffaCakes118
Size

3KB
MD5

5d82e23dc5fb1fee81ad35df95a3b564
SHA1

8ac8bf20a3cf2f1fc0316a8ca7e693156892574b
SHA256

d330e4a4d8774a7dca76206cac25f5fd4db64301b629aee0207426bb949c5fab
SHA512

0bd609513600fb894fd1895a2e19b53390d9b5e2d7a59e9ea803e2d28cb1c8b44d84a0c3574a375fa4539f458ef3af3c03c1eb021c5bf8cf37f4b6bccc3d9246

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d82e23dc5fb1fee81ad35df95a3b564_JaffaCakes118

Files

5d82e23dc5fb1fee81ad35df95a3b564_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ