5ec73e3f0356e5998a2741e1ffbd443c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ec73e3f0356e5998a2741e1ffbd443c_JaffaCakes118
Size

195KB
MD5

5ec73e3f0356e5998a2741e1ffbd443c
SHA1

1ff9449c035b2c97f6cef4a498ad81d38f818dc6
SHA256

e26e751646f5e2e905705e00af1126a8ca2c6ac1661a71fe9eb3138d109302da
SHA512

26f1f50cc0245dff605fe5d1c49333737afda04391a34d449e1145661205d3d54ff3db62b5f829a8d38ffb95ff23d1e3d97deac0b8038a6f557cf6a1be926a70
SSDEEP

3072:/w6W4wpCNzrG+XL6Y+b9KBPHW+zzeTq4SJJJB+F8/Ba3Fe0ekXbhpy2hI4pzf2+y:f0ekXb/yiI44+syVP07IZeKvpUu2s38

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ec73e3f0356e5998a2741e1ffbd443c_JaffaCakes118

Files

5ec73e3f0356e5998a2741e1ffbd443c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 708B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 32B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ