5ede63658a1ed82feeaf93e698e0871e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ede63658a1ed82feeaf93e698e0871e_JaffaCakes118
Size

146KB
MD5

5ede63658a1ed82feeaf93e698e0871e
SHA1

9c8e11b866b6aefc229714548852c887fdec181c
SHA256

8fcecc30492aa13244a5a57a4e09ed9c3edf22e1bcc630e96b7c49eb376bae3d
SHA512

92df74dbbc878bb9f29032ca48c0591b75b8d5d5ac3eeb95eec0442b0cb2cce42db1f2f8a894d9e6ea72d88e141c1874a1caeea17f9fe6e24e3bc787edad4ea6
SSDEEP

3072:S4W4d38ItFXwhCoX4lCCnZkzXtXT8fVud:JfghTjJLtXsu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ede63658a1ed82feeaf93e698e0871e_JaffaCakes118

Files

5ede63658a1ed82feeaf93e698e0871e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.ns5tjn
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.packed
Size: - Virtual size: 3.0MB

.loader
Size: - Virtual size: 416KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.engine
Size: 119KB - Virtual size: 120KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE