5d7d74a7dbd61a6e8581b7953b5313ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d7d74a7dbd61a6e8581b7953b5313ca_JaffaCakes118
Size

8KB
MD5

5d7d74a7dbd61a6e8581b7953b5313ca
SHA1

caa6d7d6646dda393ef289569c1a0bc7eb5ab039
SHA256

57ac8e5f51ce4c21aa15d5e762b944deb0e6fa3b37ac9dbf60d40bd08bf59dbc
SHA512

e594198651793e0710b3273007636171a5626ecdb2616903003485c03f6f152ceb32b8952b3550d0d424ae8b5c104bac20e7c6f94658b6e028239f2b9387bf69
SSDEEP

192:nRHGkBR8YHHNKuIBQoOCf8Pf/ij7m+1INDqBbJQd7XxlsJ:5JAJBeHPf/ij7m+1INDqJ8b+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d7d74a7dbd61a6e8581b7953b5313ca_JaffaCakes118

Files

5d7d74a7dbd61a6e8581b7953b5313ca_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ