5e8d10860e61cfe00c69711612a600cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e8d10860e61cfe00c69711612a600cc_JaffaCakes118
Size

460KB
MD5

5e8d10860e61cfe00c69711612a600cc
SHA1

2df156f70558eb616bac5ca4ac6c205d23c09558
SHA256

bc7db408c798d9211a0b6ca03d439e40a36cef095105a0f94163fce209ed4eb7
SHA512

e5cab7bee39cd6f31f100c56c401faa0d8c2e6a9c31d789996cdc25ebbeeda7bb9b995c0a5bb5ed1bb5b90fdd4cc571ce760093a7d5b5a4a2db340863cf1b7c6
SSDEEP

12288:WbK0cgvVwxkTL8gTeMOUtMMfomOlG+OeO+OeNhBBhhBBT7C+rc5ErtqIv:0bcSTLWMOUtMXmOlPe+rc5ErtqIv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e8d10860e61cfe00c69711612a600cc_JaffaCakes118

Files

5e8d10860e61cfe00c69711612a600cc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 978KB - Virtual size: 977KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 828KB - Virtual size: 828KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ