5ef621f2a14bb16ae6a96a625ebe19d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ef621f2a14bb16ae6a96a625ebe19d6_JaffaCakes118
Size

112KB
MD5

5ef621f2a14bb16ae6a96a625ebe19d6
SHA1

ac9041850d9f9ac5ecfb563679a4ab669c278d01
SHA256

c1c65b73e71b7684819fc369ffed56e006373a600536bcb26042aa6731e13a30
SHA512

81b3d5714b1b6753a39a8336b110b136f3244f8ccfae6d2155fec3203ff5a8a11a7877924ea99ff57db4fe3268457e6dc1c988f337e0a8c87f432a31c24cb88c
SSDEEP

1536:AXbK6kuQ5qWxkNZ4r55Pa9jtn1XuoPsH7nr:AXbKHuQ8W+Zs55PkjtduSS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ef621f2a14bb16ae6a96a625ebe19d6_JaffaCakes118

Files

5ef621f2a14bb16ae6a96a625ebe19d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 103KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ygav
Size: 643B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ