5d996c7e1e9348186967610c7c5fd6fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d996c7e1e9348186967610c7c5fd6fe_JaffaCakes118
Size

288KB
MD5

5d996c7e1e9348186967610c7c5fd6fe
SHA1

b360c1241e1e024fb5f8a36ab029e92f783d6027
SHA256

2dfd402eaef9d14ea4c0f33af78d004344083cb108c44e6b1577ea5881c494ab
SHA512

8d288a88a867e14f54a47b9517682ed80352764a8b6a27421f57c61e1e4f872fdce800bf3dfeae133cd1e1b5fab116295a1ad59fb748af87491facc87cda57db
SSDEEP

6144:tcMVMY2cSWHbcbJb3bk1blbabRbrj6lW6WHSeHsz:fmWHgtzQ1JO976w6WHSvz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d996c7e1e9348186967610c7c5fd6fe_JaffaCakes118

Files

5d996c7e1e9348186967610c7c5fd6fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 448KB - Virtual size: 447KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklstb
Size: 648KB - Virtual size: 664KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.relo2
Size: 4KB - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ