5d7d1abb1990d5405556cc8755618d10_JaffaCakes118 | Triage

Sharing

General

Target

5d7d1abb1990d5405556cc8755618d10_JaffaCakes118
Size

682KB
MD5

5d7d1abb1990d5405556cc8755618d10
SHA1

f666ea1ab33f44c8a92d3e0f98934af025e6564d
SHA256

d334dca7a357ba92b5644c8766cfc5b7dd92e8a4b0d5571a6e11b1eb278ca93b
SHA512

bc52e6f7b31b44ff98d1207c9b12158d8acaf2b3cedd231e2b4c7bf8dbbced27bec789f2243ac0c414272a37ea1d628983ed88fe3501df595e92af6b282dd706
SSDEEP

12288:hXfVi8YzpQvrflMPpJG2X974b3BeB4ajJkA9tkg8pG:hXsXwflMGg+3S3JkA9b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d7d1abb1990d5405556cc8755618d10_JaffaCakes118

Files

5d7d1abb1990d5405556cc8755618d10_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 563KB - Virtual size: 563KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 24B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ