5d78e6fb2de3e2d33426a9b54b559d3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d78e6fb2de3e2d33426a9b54b559d3a_JaffaCakes118
Size

17KB
MD5

5d78e6fb2de3e2d33426a9b54b559d3a
SHA1

ecd9b4a648bac75e87a9447fd065f1d62cde225f
SHA256

63f89c009fa7c6d935711c12370facafd588f2af4dfbdf03423560ce2d01e110
SHA512

62b923cf3f2e4b538535567476e882fcb86619231fa22e564f21b3724591f9ba343ac6ffe57a2f3f6e2b96e2424eeb1279ae478ca98cdf358762fe74a92549c8
SSDEEP

384:Wo8cdyux08x3D+GbTRUWZmw3qf2HqWq7rK7Gb:Wo8cdyux08QGbTRzZmwE57rEU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d78e6fb2de3e2d33426a9b54b559d3a_JaffaCakes118

Files

5d78e6fb2de3e2d33426a9b54b559d3a_JaffaCakes118
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 245B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 122B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ