5f07ba1fcb49b996f8bf8caddd335e08_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f07ba1fcb49b996f8bf8caddd335e08_JaffaCakes118
Size

412KB
MD5

5f07ba1fcb49b996f8bf8caddd335e08
SHA1

bfff7a7f1cc3c54163941c71606e47dfe58c388c
SHA256

85cd23472de4eb5711c1dc9e6e672e6b07347c539fc9cfe2193f55c2cbfee232
SHA512

6c296259ba4b012f873aef2308789e5270b1f9de330756b9bdb6d3fea6cfc633f39875e100da820c07208b3a28b520e6d0d2f7e3ae43b6a8fe42d03f0b2e2d4d
SSDEEP

6144:DRaxd4S8McZwFzYqfpxrp2TQ0n6o0Tsbx+snRANQwb+LQv7kjS7pyowBzF8olBhd:laxjcZ6zBfnD+6Kx+NjbiS7pyowzBr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f07ba1fcb49b996f8bf8caddd335e08_JaffaCakes118

Files

5f07ba1fcb49b996f8bf8caddd335e08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 395KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

and
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE