5ed4ca060c678a85761cbcc56a5bdcc4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ed4ca060c678a85761cbcc56a5bdcc4_JaffaCakes118
Size

169KB
MD5

5ed4ca060c678a85761cbcc56a5bdcc4
SHA1

0b08d5672d0149843322b3e8355ad3710b384931
SHA256

c0c0313d085c116d481b64a4e0d7ccdc23b7bc658561be3dcdb1c485255e295c
SHA512

fd87977911e967050b350ca853e360d6dca25a32e0b995155c886bbca81c49a2717ca0b3e27ebff786a2a57fa760ce4ec89d8f5f8eb9f337933c2d1876c53d95
SSDEEP

3072:GpOUop368oUkutRYv1O1HUKk/v2FmXrVyp2xZzzBruTHyIE:ejX5cU1OFdSwmbVJzQT8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ed4ca060c678a85761cbcc56a5bdcc4_JaffaCakes118

Files

5ed4ca060c678a85761cbcc56a5bdcc4_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.5b8x5s
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fr$e3n
Size: - Virtual size: 596B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.um78tl
Size: - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.$hgnrn
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 923B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rtss
Size: - Virtual size: 3.0MB

.loader
Size: - Virtual size: 412KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 98KB - Virtual size: 100KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE