5ef989c841382898d5ae89f06b9444ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ef989c841382898d5ae89f06b9444ba_JaffaCakes118
Size

165KB
MD5

5ef989c841382898d5ae89f06b9444ba
SHA1

1397667544979e5eafc9a50058e84a4522103180
SHA256

9d9725093c7288548614db88750823290fed833cbb7a46652826bdd01d8ae2f3
SHA512

831d42fd465328d950f5ece0d2bf4f627a2bd35750421e093ed2671cf29c21696b2e1675b6eb5e6d2883937cc66af5e67eb434582dc0b49b1b77371fef0f030f
SSDEEP

3072:a8DTOWuhe69/Xwwb5RUUgudU0iQo4qrBbY7CCu3l5mMsLGZBk+32MTDK7:aFW769vwwb5aUgR05nqlY7CCwl5H0GdO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ef989c841382898d5ae89f06b9444ba_JaffaCakes118

Files

5ef989c841382898d5ae89f06b9444ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE