5d7e20a31ed6b2b6acfd548981a85b81_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d7e20a31ed6b2b6acfd548981a85b81_JaffaCakes118
Size

597KB
MD5

5d7e20a31ed6b2b6acfd548981a85b81
SHA1

e526bd5cc102182b4a9237a0a024a1232508ad8a
SHA256

face2cb14ffd585a0d7b4398cad16db6fbe10bab4fbf0fddfde1e638ab7d2e26
SHA512

ee9139236f30875314c830bb8c959bc66331cdf8e10ac999b3cfa6838894b45d6138cca89d673ccfad45b33ee4ed5ac37508b8ff8a7ae09b24ce13bcf00fc890
SSDEEP

6144:UXJ5GaRhqrF3eGhpcudw7iXtaevZn7W5TO8zx1j0J2T0xsWX67uD1sy:sJ5GarUZXAevZnQO8lx0J2usWq7uR9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d7e20a31ed6b2b6acfd548981a85b81_JaffaCakes118

Files

5d7e20a31ed6b2b6acfd548981a85b81_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Buildserver\Hudson\jobs\OA\workspace\oa\trunk\c\projects\client\Release\oareg.pdb

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 361KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.khe
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE