5ebfa3afa8fe1e7e55b41c5627dc8909_JaffaCakes118 | Triage

Sharing

General

Target

5ebfa3afa8fe1e7e55b41c5627dc8909_JaffaCakes118
Size

493KB
MD5

5ebfa3afa8fe1e7e55b41c5627dc8909
SHA1

e4f043ae2d6ac99fad188c722107dcf3faa24afd
SHA256

2e6026ef87e63f2a816490fc7def5091ed497ed790a87e8aae205b9f3d64f2f7
SHA512

0ad4d61bd68b9aff9c50756797df258ca250c45dce497e6317078fe81649cfe6cac898afca2a3a9108d1a778fbf25e58914eae6485a7d206e52b447533137ad4
SSDEEP

12288:UO9lc0WMgpEZuXwPGd7JkwxjUbyI8WHX0nfCMsaLng:UWW7MxZDP49ZdTWbKg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ebfa3afa8fe1e7e55b41c5627dc8909_JaffaCakes118

Files

5ebfa3afa8fe1e7e55b41c5627dc8909_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 412KB - Virtual size: 410KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.armp
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE