5edcd03ba8e51431032bbbf81c82db70_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5edcd03ba8e51431032bbbf81c82db70_JaffaCakes118
Size

764KB
MD5

5edcd03ba8e51431032bbbf81c82db70
SHA1

6bf008525f780e70fba19c94629e18ac22d904c4
SHA256

9e575c130867155ae2ba01b22b6e6cb59ab334dd66d8dfc29d3b6ff739c92bef
SHA512

bdeb9e301e2d2c3dca1916884659f8baebde5cdff2ab2923d443a26b0e99f891b49f4dac1b568e3fc2c3c69732e0bb5389781c66f94dc224fe96841e4f192412
SSDEEP

12288:U6lg9NZK9jbrW5AwGwHDx1fKI/nxvVtO2tjvP5cU7MoShS/tXwtqLs:7+969/rW5AjixFHxvjO2tRWC+q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5edcd03ba8e51431032bbbf81c82db70_JaffaCakes118

Files

5edcd03ba8e51431032bbbf81c82db70_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 661KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ