5ea0c6ef9f4fa464be1f5cced2599331_JaffaCakes118 | Triage

Sharing

General

Target

5ea0c6ef9f4fa464be1f5cced2599331_JaffaCakes118
Size

122KB
MD5

5ea0c6ef9f4fa464be1f5cced2599331
SHA1

1ccbb71696cd3e99ace3fceaa77fb5d94d8ee849
SHA256

a23c0b5b6d685198ad71806ce94a670f885badc6f8819dd76baf1d45b12a3ade
SHA512

339b5fd137a140f522bb9b3b33bcc93471a96a9c5774894cdb7fd58fa90861455c60cde1933ce4eddb6751846b324edc13a72019ed999b8f3b2958c23bd45781
SSDEEP

1536:lIgKHvkUuOg07ZdG+2Q7gl5aYm5HiqvbM2OQyUNt0yxf0NFgYy0yRKW:lIgKHvbXgAZ4+2Q7glYe+34ot96Fk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ea0c6ef9f4fa464be1f5cced2599331_JaffaCakes118

Files

5ea0c6ef9f4fa464be1f5cced2599331_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.hawlzo
Size: 1KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.txxwak
Size: - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1swg73
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 902.0MB

.data
Size: 120KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE