5ef758902c68cff2fb4f634d635bb36b_JaffaCakes118 | Triage

Sharing

General

Target

5ef758902c68cff2fb4f634d635bb36b_JaffaCakes118
Size

88KB
MD5

5ef758902c68cff2fb4f634d635bb36b
SHA1

70796e44db508c705bc8eb8586e9348c3d5bf000
SHA256

4109d7fd00e634840fd12ac78c4e03807525f314ea7193ddfd2af0e80659f5a7
SHA512

88119927a1f4f15335fc93ea374e104a4638beeadfe36278c9e0bc27d853cf1af7b7dbf07dbb9843bc5549144f9f67fa669a25c8d5684e5bcce672dc7b7e95c5
SSDEEP

1536:EPx+riFFG1g3K6KUm3wEeQqjh+rmKVsNsU:OYdsFE2jwqWsNsU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ef758902c68cff2fb4f634d635bb36b_JaffaCakes118

Files

5ef758902c68cff2fb4f634d635bb36b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.u
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ