5d632ef63dafdd4163ba4e5733c7a7d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d632ef63dafdd4163ba4e5733c7a7d3_JaffaCakes118
Size

83KB
MD5

5d632ef63dafdd4163ba4e5733c7a7d3
SHA1

a2b08dbb7dc4119e1fa984479ee0a0845070942e
SHA256

40ea2bc4a8ba3a68b4db0f2111f1861fd30b907b84bb64f40842e36bea60208f
SHA512

a51cbc650579e05ef76b1902eccc6977bfc56e7c2f1c04fd081395f010eac06e302993550c5a000ed60805b9371a8a516cbc48b729f766b929b3253cd11c44a0
SSDEEP

1536:9MKdra4osX4Vw9S0ypkrh7zZ0GJmqTKXEhdhYywBu3PBl0:CKdrNosUw9Qkrh7zZ0kmqTKYU2PBl0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d632ef63dafdd4163ba4e5733c7a7d3_JaffaCakes118

Files

5d632ef63dafdd4163ba4e5733c7a7d3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dpvsetup.pdb

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wtq
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE