5ee316c8eaf44b5346369a2140dfa78c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ee316c8eaf44b5346369a2140dfa78c_JaffaCakes118
Size

147KB
MD5

5ee316c8eaf44b5346369a2140dfa78c
SHA1

6b5dc423ae74b6f6824b28c08feaae5dac933a2e
SHA256

90df3111676442e978565215c66f6dcfaf7e23a0c95bbf79a37b4fac00e7f82c
SHA512

b2ff0aad274c2854f3bb0d0b852354e5b62d035ac6c3e2cf29e8e63eccc95b1b9128f82d29b626500e920c5808aef71b1370d1b7b37bed4db3a2b0012b659606
SSDEEP

3072:z5Rfr1ZZpFhVpnR+DGfAUVNSnAto86mot6NIQ6PnUPDl:z5tr5BVFR+0AONS2kPQD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ee316c8eaf44b5346369a2140dfa78c_JaffaCakes118

Files

5ee316c8eaf44b5346369a2140dfa78c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE