5d8ccb3f9d803c0f598703e1a1fd8ddd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d8ccb3f9d803c0f598703e1a1fd8ddd_JaffaCakes118
Size

367KB
MD5

5d8ccb3f9d803c0f598703e1a1fd8ddd
SHA1

68a219079ecd645dc0c0197fe6ad0a311d174bf2
SHA256

a4c0fcf06e904d66cd8a687ca984355a0e0dd8da3eae5aa1adc193bfa6483978
SHA512

8ed46fcf87353a9d45379183cb80f90a6ed5d3b5551e2337081ab8428e54be3bd30f0eec7e23825b51fe3f5cfc69f59c272420f0d7326f24546abd2d3a06001e
SSDEEP

6144:DZ/ceMNkP9fYCJTDNk7h6j5rDPy6r/ozIxfdYn8J9OmrSLaWMlwiz5DutptZFcBv:DJc3NGKCRDxzJRi+rMaWMlwiVGpFc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d8ccb3f9d803c0f598703e1a1fd8ddd_JaffaCakes118

Files

5d8ccb3f9d803c0f598703e1a1fd8ddd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lhhack
Size: 366KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE