5ea6875c521b3db9cf3c1d5335675c62_JaffaCakes118 | Triage

Sharing

General

Target

5ea6875c521b3db9cf3c1d5335675c62_JaffaCakes118
Size

408KB
MD5

5ea6875c521b3db9cf3c1d5335675c62
SHA1

637b81a38cee05f11960cd4394b2d051fcbd5a10
SHA256

2bc969730369bb164df50f5e5bc021c2ec8925baf1adced117615d8159a5ba48
SHA512

37b2c5eac1f4dee1e98e349c5065ace362b2c1b76eab12fe9aa6c54e16f21d633ce3c9f279fc4ea44e8ee1edf1440e369b105296e92e002508a2278dea028c26
SSDEEP

48:qvLqgJwcJm9ENCj3DvmhnfKZC6relBh3dHiumSgYj25e9S:20cJIENYDvmhfKQ66lD3dCumSgYj8eI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ea6875c521b3db9cf3c1d5335675c62_JaffaCakes118

Files

5ea6875c521b3db9cf3c1d5335675c62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: 4KB - Virtual size: 30B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 295KB - Virtual size: 687KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ldata
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE