5ea3d0a793c3c03cf19fd4b8a2dc26ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ea3d0a793c3c03cf19fd4b8a2dc26ed_JaffaCakes118
Size

586KB
MD5

5ea3d0a793c3c03cf19fd4b8a2dc26ed
SHA1

ecba7ce9f208fe9c62039710d5ef48231b7185a9
SHA256

ccb1ffeccab275fbd67ceadd8ba67d140ea064c0259133daf32a36d3d0ec7414
SHA512

8d85b667f1449422f38e39a5007983c65b6eeccd907d7bcc510c8781b16d45c48e6c65485f09837efacecc8fa6726b4f427ff7116a3ca8afe4604f21bb83f1a9
SSDEEP

12288:kS3LnHsHxISUVTTC4BP86ALKgbPgvLzB:rbnyxRoT7ZPA4vL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ea3d0a793c3c03cf19fd4b8a2dc26ed_JaffaCakes118

Files

5ea3d0a793c3c03cf19fd4b8a2dc26ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 246KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ