5e8a228a78239182f6121455c844196d_JaffaCakes118 | Triage

Sharing

General

Target

5e8a228a78239182f6121455c844196d_JaffaCakes118
Size

1013KB
MD5

5e8a228a78239182f6121455c844196d
SHA1

79308052fd2b0337ce600611bb49cb6b2746ca99
SHA256

b313077d0dd8f4a324076fb638513bf14be003c3306b8edd438a38ccada822f8
SHA512

063ad4c331aafb962cf8d411beee389f4829d69fd76ccda54ea8b9efc81a7f9ec2b439c22a6e4463f9e61e0dc3380cfbf07dbaad2f3999dfdffd3987658d9295
SSDEEP

24576:2DcyejcbqZKVSTYBCyqZOlWsP9/hJlTOYMy+Au1yvv4:2DcDcbEKVSEBlsIJlT59ud

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e8a228a78239182f6121455c844196d_JaffaCakes118

Files

5e8a228a78239182f6121455c844196d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 4KB - Virtual size: 864KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 904KB - Virtual size: 908KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ