5e5aad2919c115d799f3fad7dd7a45d2_JaffaCakes118 | Triage

Sharing

General

Target

5e5aad2919c115d799f3fad7dd7a45d2_JaffaCakes118
Size

174KB
MD5

5e5aad2919c115d799f3fad7dd7a45d2
SHA1

dc0e5f8b10f4952b067c88904cf84f94ced682f2
SHA256

2d3503f5bd1183ca4710754415dae1bf0c87f0e18c7721d2c6ab020b4bd5d5c4
SHA512

9d348e5f4b6d664b1ef41075597bfed7e402ee0e28efb4ee03ea3f312d3931c994b2756b5cfd1de7bf07b7aa15429f7c91fe4395da5cbaa8504e959300ada691
SSDEEP

3072:zQ2wnw+f3oGQTmGOOWN00HgCQkIOoRCja+0xnVgFyWhKlzeVR1WbAn:zQRnwC6qGRMLQ3Orh0xshx5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e5aad2919c115d799f3fad7dd7a45d2_JaffaCakes118

Files

5e5aad2919c115d799f3fad7dd7a45d2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 39KB - Virtual size: 437KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 38KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ