5e99c895d725c1e407cc0b12c1305210_JaffaCakes118 | Triage

Sharing

General

Target

5e99c895d725c1e407cc0b12c1305210_JaffaCakes118
Size

396KB
MD5

5e99c895d725c1e407cc0b12c1305210
SHA1

ea0bd8ac9526c2c45515a71cc02bccc8211e011d
SHA256

148cc3ac302747b83a74a692b6a99584e86c9b14fa2116470928ef88ecc5972d
SHA512

4d9364dba4c0560fc4f2c9c8176aee83d8d36ded53562d513e6a49a20d26d98b728e3c21f15a78d176d4dba47af787ee022c4c02f2908d81b7b83916cb0870c1
SSDEEP

12288:E9V4Q53VBgKge3GOA/7mZXCWP6jbwErI70:e753LL3I/YPkk/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e99c895d725c1e407cc0b12c1305210_JaffaCakes118

Files

5e99c895d725c1e407cc0b12c1305210_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ