5ef4420dd04fc9912b50db6459cf778d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ef4420dd04fc9912b50db6459cf778d_JaffaCakes118
Size

115KB
MD5

5ef4420dd04fc9912b50db6459cf778d
SHA1

24cab72113575160309c1fde3c92cae0ca870e66
SHA256

ff84ef41718fde0a6f58349ba4689084cbe4842f854a5ea5e7f830472afbf905
SHA512

99eae78d6e9a6ad2baf94b28741225fbe78ad35d2e69423f38280c948fdc2d5c9a8e93a7ea5ab9105dc30457fba14a4d5255f3888b7625b5cc05b64cb056030c
SSDEEP

3072:vEThQHkLdfcmoUYcEASfUsng2Bf7vb9RpXvA9GIKSA:M1skLWBBc+g2rS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ef4420dd04fc9912b50db6459cf778d_JaffaCakes118

Files

5ef4420dd04fc9912b50db6459cf778d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ