5dab3394c6188efdf2d2534ade672384_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5dab3394c6188efdf2d2534ade672384_JaffaCakes118
Size

447KB
MD5

5dab3394c6188efdf2d2534ade672384
SHA1

2e7a416ffbac7a5c84704896e13c6a1828fa1917
SHA256

6c8baa5d667b5a5e44d47a3f6c7a7032af63a51ef30b41991b0b56b859d73316
SHA512

16ee9bc668abdeae947908b91a0b64e21b8415e15bfb569c4fe755cae4a492b6557dd0dc82d3bf72e51d66320898f3051f8a58f58bd3b60f745383a3450c192c
SSDEEP

12288:xToer7/fdJGGOCgSs6MMaoLaEmLLY+AjE5wTowedkgn:xTXr54GOxrjzE6JAjE5w01k4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5dab3394c6188efdf2d2534ade672384_JaffaCakes118

Files

5dab3394c6188efdf2d2534ade672384_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 361KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ